Voice Recording and PCI DSS

Voice Recording and The Payment Card Industry Data Security Standard PCI DSS 

The Credit Card Industry formed a self regulation group and set of security standards to deal with fraud and consumer privacy.

The standard applies to all organisations that process more than 20,000 Card transactions a year, equating to approximately 54 transactions per day.

Organisations must ensure customer data is stored and/or accessed securely and only retained when absolute necessary.

www.pcisecuritystandards.org is the best reference to learn more about the standard.

https://www.pcisecuritystandards.org/tech/supporting_documents.htm gives you details regarding PCI DSS Security Audit Procedures and a copy of the PCI DSS Payment Card Industry Self-Assessment Questionnaire.

So how is Voice Recording Affected by this standard?

In order to answer this question properly, we have consulted with a leading PCI approved auditing company Ambersail, based in Warrington, Cheshire.

Their feedback highlights that voice recording is included within the audit process, but audited differently from the main element of secure network access risks. Ensuring practices of secure and restrictive access to recordings is imperative and focused on during on, during the audit process.

The standard is also dependent on the client in each instance and considers the levels of credit card transactions that are being recorded.

If you would like to discuss any aspect of the PCI DSS in more detail, please do not hesitate to contact your Account Manager, or call us on 01474 561111 and we will be pleased to help you.

The above information is issued for information purposes only and is not legally binding or official in any way.  ComputerTel Limited suggests that specialist advise is given by an expert and we are pleased to recommend impartial companies to help you.