Commerce Security Authority
Commerce Security Authority
Authoritative resources on payment security, fraud prevention, and PCI DSS compliance.
What we cover
Four areas, kept current
Payment Security & PCI DSS
In-depth coverage of PCI DSS requirements, cardholder data environment scoping, and compliance programme management for payment processors, acquirers, and issuers.
Fraud Prevention & AML/KYC
Analysis of fraud risk frameworks, AML typologies, KYC obligations, and the controls and technologies financial institutions use to detect and stop financial crime.
Vendor Directory
A structured directory of vendors serving payment security, fraud prevention, and PCI DSS compliance teams covering fraud detection, tokenisation, identity verification, and more.
Glossary & Reference
Precise definitions of PCI DSS terms, AML/KYC concepts, fraud risk terminology, and regulatory frameworks used by payments and compliance professionals.
From the desk
Latest articles
Term of the day
Risk Assessment
A risk assessment is a structured process for identifying things that could go wrong for an organization and analyzing the potential harm they could cause. The goal is to understand which risks matter most so the organization can decide how to address them. In a payment security context, it helps teams weigh threats to systems and data and prioritize their responses.
Directory
Vendors worth knowing
Accessibility.com
Empowering digital accessibility for businesses
Accessibility.com was born out of necessity. A strong core of professionals with nearly a century of combined experience in the digital accessibility space recognized the need for tangible and practical guidance to drive digital inclusion and compliance. We're excited to work toward our vision and thank you for your support.
Pixelcase group
Smart solutions for safer community spaces
AeroRanger offers AI-powered ANPR and compliance software tailored for councils, enhancing compliance with PCI-DSS standards for parking payment security. Their solutions are designed to improve safety and manage local spaces efficiently, even in remote towns. By providing smart monitoring tools, AeroRanger helps reduce illegal dumping and streamline enforcement and patrols. The software has been successfully implemented in locations such as Newman and Tom Price, showcasing tangible benefits for local councils in maintaining compliance and improving community safety.
27k1 Ltd
Compliance made effortless, security guaranteed
27k1 offers PCI DSS ROC Management System and ISO 27001 ISMS Software that streamlines the compliance journey. The software is designed to significantly reduce the time required to prepare the PCI DSS Report On Compliance and makes ISO 27001 certification easy. With integrated system modules, users can manage documentation effectively, creating and accessing company-specific documents whenever needed. This class-leading software is aimed at organizations looking to simplify their compliance processes with rigorous standards for information security management.
Featured resource
Something to take with you
Encryption and Key Management Reference for Cardholder Data Environments
Know exactly which key management evidence your QSA will request for PCI DSS v4.0 Requirement 3, and have it ready. Free 17-page practitioner reference.