Many times, we receive calls from customers who ask "Is ProfitMaker PCI Compliant?". Technically, ASI Computer Systems meets PCI Compliancy requirements, but the primary focus on being PCI Compliant falls squarely on the merchant.

Here's a simplified list of the Do's and Don'ts that should be followed by merchants handling credit card transactions:

Do

• Do regularly monitor and test networks/systems that have payment card data.
• Do implement and enforce a company Information Security Policy.
• Do install and keep up-to-date, a firewall that protects cardholder data stored within company systems.
• Do assign every employee with computer access a unique ID and use a robust password (e.g., mix of letters, numbers, and symbols), which is changed frequently (every 45-60 days).
• Do restrict physical access to company systems and records with cardholder data to only those employees with a business "need-to-know."
• Do encrypt cardholder data if transmitting it over wireless or open, public networks.
• Do use and regularly update...