PCI DSS
In one sentence
The security standard for any business that accepts credit-card payments, set by the card brands.
The Payment Card Industry Data Security Standard applies to any organization that stores, processes, or transmits cardholder data. Even small merchants must meet a level of it (often via a self-assessment questionnaire), and it overlaps with general cyber hygiene.
Why it's on your cyber insurance application
Card-accepting SMBs may see PCI questions; the controls overlap heavily with cyber-application requirements.
The written evidence carriers accept
A “yes” on the application needs a document behind it. In the Readiness Pack, that document is:
Related terms
Would you pass this question today?
The free Readiness Check scores you across the ten control domains carriers probe, in five minutes, no email required for the score.