More About PCI-DSS and PCI-PIN Certification

Jakarta, 03/11 - Digital transactions became a growing trend. We no longer need to hold cash to do the payment. However in this sophisticated era, there are so many financial crime potentials haunting us. Therefore, ensure we are always using a payment method from a company that already obtains certification of PCI-DSS and PCI-PIN. So, what’s the point of those certifications?

 

PCI-DSS

It’s called Payment Card Industry-Data Security Standard, and is required to guarantee the payment system used already fulfills the minimum standard regarding the security system. The objective is to minimize any crime and fraud potential of finance.

PCI-DSS certification also aims to ensure the product of any financial service provider technologically able to receive, process, and save the transaction data securely. How it works is by mitigating any potential weakness of the payment system to be a configuration to cope with. 

The requirement to obtain the certification is also quite strict, since the company has to fulfill all the security needs, such as secured network, card holder data protection, vulnerability management program, strict access monitoring, regular network testing and monitoring, as well as the maintenance of information security policies. 

 

PCI-PIN

It’s called the Payment Industry-Personal Identification Number, which used to be needed to run the card-based payment. The system runs to ensure the security of financial services that require input PIN from the customer. 

Compared to the other one, this PCI-PIN certification system could be categorized as more complicated to PCI-DSS. It is because the aspects that must be assessed are a more complex network, from the front-end operational to technical equipment to process the payment, including details of management process. 

Similarly, these certifications are the bare minimum standard for payment services providers. The standard is set by the PCI Security Standards Council (PCI-SSC), an institution established by several international financial groups; American Express, JCB International, Visa Inc, MasterCard Worldwide, and Discover Financial Services. The assessment standard set by the certification not only covers the financial services provider, but also other parties that are involved including banks, merchants, and third parties such as data center, call center, and firewall management. 

Yokke as the most comprehensive payment gateway services provider in Indonesia has been certified with PCI-DSS and PCI-PIN. Moreover, Yokke is the first payment gateway company in Indonesia that obtained both security standards. As a result, the services of Yokke EDC machines are more secure from any potential fraud, including QRIS services that are able to process various payment systems.