ABSTRACT

North American Payment Card Industry-Visa, Mastercard, American Express, Discover, and JCL Visa USA instituted the CISP, first mandated in June 2001. The program is intended to protect Visa cardholder data, no matter where it resides. The idea is to ensure that cardholders, merchants, and service providers maintain the highest information security standards. CISP compliance is required of all merchants and service providers that store, process, or transmit Visa cardholder data. The program applies to all payment channels, including retail (brick-and-mortar), mail/telephone order, and E-commerce.