.

HTML Menu Css3Menu.com

 (803) 364-4366
 
 Welcome to CoCard - IMG Merchant Services
Home Contact UsAbout Us

Partner Login  Career Opportunities

                               PCI Data Breach

 

                                       PCI Compliance

 

 

PCI compliance refers to meeting the requirements established by the Payment Card Industry Security Standards Council (PCI SSC), an alliance of the five major credit card companies — Visa®, MasterCard®, Discover®, American Express® and JCB International®.

 

The PCI SSC established and enforces the PCI Data Security Standards (PCI DSS), which lays out for all merchants who process, store or transmit credit, debit or prepaid card information the steps to take to maintain a secure transaction environment.

 

COCARD® & IMG supports and promotes PCI compliance. Our PCI program provides services that help merchants become and remain compliant, even as PCI DSS requirements change. Listed below are comprehensive components to the program.

  • Our online Self-Assessment Questionnaire (SAQ) is an intuitive and easy-to-use tool with picture-driven qualification steps that helps merchants easily determine their Validation Type. It is supplemented with expert help text and real-life examples.

  • External scanning detects network vulnerability for merchants with external-facing IP addresses and finds holes in web-based applications. COCARD then issues easy-to-understand reports detailing the results and prioritizing vulnerabilities while offering hands-on assistance for remediation.

  • A set of custom security policies, powered by the Unified Compliance Framework (UCF), and policy templates that are automatically generated based on how merchants process payment cards provide an individualized approach to compliance.

  • On-demand security awareness training prepares merchants to handle sensitive information, satisfies PCI DSS requirements and eliminates the need to purchase a costly training program from a third-party provider.

A data breach occurs when an unauthorized party accesses a merchant’s network and steals cardholder data. There are various types of breaches including network (hacking and skimming), malware and spyware, the physical loss of the card, paper records or a device like a computer or CD, and physical losses from employee dishonesty. Regardless of how it plays out, a potential result is always the same: unencrypted personal identifying information or card data is compromised by fraudsters and thieves.

With fraudulent payment card transactions continually on the rise, it’s more important than ever that merchants protect themselves from potentially huge financial losses associated with a data breach. COCARD® offers a unique Data Breach Security Program specifically designed to help merchants meet the expenses resulting from a suspected or actual breach of payment card data.

The Data Breach Security Program offers peace of mind to merchants during an extremely vulnerable time with:

  • A forensic audit as required by the Payment Card Industry Data Security Standard (PCI DSS) whenever a data breach is suspected to confirm whether a breach has actually occurred and to pinpoint vulnerabilities in the system.

  • Industry fines and assessments met as required by PCI DSS in the event of an unintended breach of confidential customer information, regardless of how it happens.

  • Issuer-related expenses that cover card replacements costs, credit monitoring and other expenses related to a breach.

 

  • Expenses from an actual or suspected data breach are met regardless of the business’s PCI compliance status as long as the owner is not involved in the breach.

 
 
Home Office - Service Center
Innovative Marketing Group, LLC (IMG)
7296 US Hwy. 76, Prosperity, South Carolina  29127
Main: (803) 364-4366      Fax: (803) 364-4367

CoCard is a registered ISO of Wells Fargo Bank, N.A., Concord, CA.

 

CoCard is a registered ISO/MSP of Fifth Third Bank, Cincinnati, OH, Member FDIC

 

Privacy Notice

In connection with your transaction, CoCard may obtain information about you and your business as described in this notice.

 

1.  We collect nonpublic personal information about you from the following sources:

 

Information we receive from you on applications and other forms.

Information about your transactions with us, our affiliates or other.

Information we receive from a consumer reporting agency (e.g. credit bureau).

2.  We may disclose all of the information we collect, as described above to companies that perform marketing on our behalf or to financial institutions with whom we have joint marketing agreements.  We may make such disclosures about you as a consumer, customer, or former customer.

 

3.  We may disclose nonpublic personal information about you as a consumer, customer or former customer, to non-affiliated third parties as permitted by law (i.e. the police or other government authority issuing a subpoena or litigants in response to a legal process).

 

4.  We restrict access to all nonpublic personal information about you to those personnel who need to know that information in order to determine your eligibility for products and services, and to provide you with products and services, and to others who are subject to confidentiality provisions and restrictions that prohibit the use of that information beyond performance of specified services.  To guard your nonpublic information we maintain physical, electronic, and safeguards that comply with federal standards.