Global, September 2021
We’re pleased to announce Mr Yum has achieved PCI DSS Service Provider Level 1 Compliance.
This is the highest level of security compliance for service providers and followed a comprehensive review and audit of our technology and hosting environments, security protocols and internal processes and ensures all payments data is stored, processed and transmitted in a secure ecosystem.
PCI DSS compliance protects data and customer information from theft and fraud.
WHAT IS PCI DSS?
The PCI Security Standards Council is a global forum made up of financial institutions and payment providers including AMEX, VISA, MasterCard and others.
PCI DSS stands for Payment Card Industry Data Security Standard.
It’s the industry standard for protecting payments and data and for the prevention of fraud and mandates the explicit security controls necessary to protect information that’s entrusted to us.
Certification of compliance follows a comprehensive audit of our systems, processes and protocols by a qualified security assessor.
PCI DSS Service Provider Level 1 Compliance is the highest level a service provider such as Mr Yum can achieve.
WHY IS IT IMPORTANT?
It’s vital for any company processing payments to have an up-to-date security plan and being PCI DSS compliant ensures every customer’s card details are secure when paying through Mr Yum.
The PCI DSS was created to reduce fraudulent transactions and increase payment protection for cardholders.
It is considered the “gold standard”, where the highest standards of data security and protection are crucial.
There are 12 requirements in order for a company to be certified PCI DSS complaint, which fall under the following themes:
- Must build and maintain a secure network
- Protect cardholder data
- Maintain a vulnerability management program
- Implement strong access control measures
- To regularly monitor and test networks
- Maintain an information security policy
Data security has always been our highest priority at Mr Yum, but our PCI DSS compliance certification now adds another layer of confidence to our venue partners that customers’ data is safe and secure.