EMG+SERVICE FirstView Log-in
 

WHAT IS THE PCI SMART PROGRAM AND WHAT DOES ENROLLMENT INTO THE PROGRAM ENTAIL?

PCI is the acronym for Payment Card Industry. The PCI data security standard (PCI DSS) helps keep your customers' credit card information, and your business, protected. PCI DSS was developed by the major card brand companies, including Visa and MasterCard. It was designed to help ensure your transactions are secure and protected, preventing theft and fraud of sensitive data, such as credit card numbers.

PCI SMART SUPPORT

Before EMG explains more of the benefits with enrolling in the PCI Smart program, we wanted to provide any merchants that have been asked to certify with the proper support channels. First, EMG has a team of dedicated individuals, trained in the details of the PCI Smart program, available Monday through Friday between 8:00 a.m. and 5:00 p.m. CST at (800) 567-8106. You may also contact the support team via e-mail at PCI@e-mg.com.

THE IMPORTANCE OF COMPLIANCE

Data breaches have become a major concern and an unfortunate reality for merchants of all sizes and all transaction types. As a result of this increasing problem, the card brands mandate that every merchant must comply with the PCI standard.

BECOMING CERTIFIED

Through our data security partner Trustwave, we have created PCI Smart, a valuable program designed to help merchants comply with the PCI DSS. We have chosen Trustwave as our partner because they are the leading provider of data security and PCI compliance management solutions. We are confident that Trustwave's technology will help our merchants manage compliance and secure their infrastructures, communications and information.

COMPLIANCE PROGRAM

EMG has a thorough selection process to begin enrollment of all EMG merchants in PCI Smart, which includes the essential elements of data security:

  • Online resources that offer tutorials, help and education
  • Questionnaires that assist you in understanding your merchant type and proper security measures
  • Vulnerability scans that identify security weaknesses in your system
  • Online security policy advisor to help you develop best practices
  • TrustKeeper agent that simplifies the process and provides ongoing monitoring by detecting, inventorying and scanning
  • PCI-trained customer care rep available to help resolve issues

BENEFITS OF PCI COMPLIANCE

  • Security added to your business brand
  • Customers at ease while making purchases
  • Merchants and customers gain additional protections against theft and fraud
  • Risk of fines for non-compliance reduced

AMENDMENT TO T&C

Below are the amended terms of your merchant agreement providing for your participation in the PCI Smart program. The changes are as follows:

Bank may make available a PCI DSS compliance program through a third-party. Bank shall have the right to charge a PCI fee on a frequency to be determined by Bank whether or not MERCHANT participates in the program. Further, Bank may charge a non-compliance fee on a frequency to be determined by Bank for merchants who fail to provide certification of PCI compliance, and maintain an annual certificate of compliance.

MERCHANT acknowledges and agrees that MERCHANTS use of the third-party services does not guarantee ME RCHANTS compliance with any of the rules or security standards established by Visa/MasterCard! Discover and any other applicable card companies. MERCHANT further acknowledges and agrees that MERCHANT'S use of the third-party services does not guarantee the security of MERCHANTS IP addresses or that MERCHANTS systems are secure from unauthorized access. MERCHANT is responsible for establishing and maintaining security policies and procedures, and for compliance with the rules and security standards of Visa/MasterCard/Discover and any other applicable card companies, including any obligation to notify Visa/MasterCard/Discover and any other applicable card companies and Bank of any suspected breach of MERCHANTS systems.

MERCHANT expressly authorizes Bank to access information regarding MERCHANT'S PCI compliance status. Upon Bank's request, MERCHANT or MERCHANT'S PCI vendor must provide information, including but not limited to, PCI compliance/validation certification, SAQ (Self-Assessment Questionnaire), and Network scan results, and or any other information Bank requests with regard to MERCHANT'S PCI compliance within ten (10) business days of request.

Bank at its discretion may discontinue, modify or amend the PCI DSS compliance program at any time. Upon termination of this Merchant Application and Agreement, MERCHANT'S right to participate in the above referenced PCI DSS compliance program shall cease notwithstanding the prior payment of any PCI fee paid by MERCHANT.

MERCHANT expressly acknowledges and agrees that Bank shall be a third party beneficiary of any agreement entered into between MERCHANT and Bank's third party service provider and MERCHANT relating to the above-referenced PCI compliance program and Bank shall have the rights, remedies and protections afforded therein to such third party service provider.

Should you have any questions regarding PCI Smart or the fee associated with enrollment in the program, please contact our PCI help desk, Monday through Friday between 8:00 a.m. and 5:00 p.m. CST at (800) 567-8106.