Payment Card Industry Data Security Standard (PCI DSS)

Once I become compliant, can I forget about it?

Continuing your compliance

When you become compliant, you must ensure you continue abiding by the requirements of PCI DSS.

To do this, you must renew your compliance certificate every year. This involves completing an annual onsite security audit or a Self Assessment Questionnaire. If you have an e-commerce presence, you must continue performing and passing quarterly network scans by an Approved Scanning Vendor.

Also, don't forget that to remain compliant, all your third-party partners must comply with PCI DSS.