Payment Security Glossary

A reference for merchants, payment professionals, and compliance teams working with PCI DSS and fraud prevention.

Browse by category

Dark green background, "Weak Application Security Can Cost You Millions," 3 slanted images of fingers pointing to digital locks, and a "Learn the Basics" button

Browse A-Z

Showing 354 terms

B

Bank Secrecy Act

Behavioral Analytics

Behavioral Biometrics

Beneficial Ownership

Biometric Verification

Breach Notification

D

Data Encryption Key

Data Retention Policy

De-Tokenization

Decision Engine

Default Accounts and Passwords

Defined Approach

Demilitarized Zone (DMZ)

Device Fingerprinting

Digital Evidence Preservation

Digital Skimming

Digital Wallet Provider

Directory Server (DS)

Document Verification

Dynamic Application Security Testing

Dynamic Risk Score

G

Galois/Counter Mode

General Data Protection Regulation

Geo-Velocity Checks

H

Hardware Security Module (HSM)

High-Risk Jurisdiction

I

Identification and Verification

Identity Verification

Incident Response Plan

Indicator of Compromise

Ingress Filtering

Initialization Vector (IV)

Interactive Application Security Testing

Interchange Fee

Internal Penetration Test

Internal Security Assessor

Intrusion Detection System

J

Just-in-Time Access

K

Key Derivation Function

Key Encryption Key

Keyed Cryptographic Hash

Know Your Business

Know Your Customer

L

Least Privilege

Liveness Detection

M

Magecart-as-a-Service

Magnetic-Stripe Data

Memorized Secret

Merchant Category Code

Merchant Descriptor

Merchant-Initiated Transaction

Microsegmentation

Mobile Payments

Multi-Factor Authentication

Multi-Tenant Service Provider

Mutual Evaluation

N

NIST Cybersecurity Framework (CSF)

NIST SP 800-108

NIST SP 800-63B

Near Field Communication

Network Access Control

Network Analytics

Network Diagram

Network Security Controls

Network Segmentation

Nominee Director

Non-Console Administrative Access

Non-Persistent Memory

Non-Primary Storage

O

Out-of-Band (OOB) Authentication

Q

Qualified Security Assessor

R

Random Number Generator (RNG)

Rapid Dispute Resolution

Real-Time Payments

Recommendation 10 (CDD)

Recurring Transaction

Rendering PAN Unreadable

Report on Compliance

Results Request

Retrieval Request

Risk Assessment

Risk Score Threshold

Rogue Access Point

Role-Based Access Control

Round-Amount Transactions

U

USA PATRIOT Act

Ultimate Beneficial Owner

Universal Cardholder Authentication Field

Unsupervised Learning

Untrusted Network

V

Velocity Checks

Virtual Private Network

Visa Account Attack Intelligence

Visa Dispute Monitoring Program

Visa Resolve Online

Volatile Memory

Vulnerability Scanning

W

Watchlist Screening

Web Application Firewall

Wolfsberg Principles

Z

Promotional banner graphic asking if you are ready for PCI DSS 4.0 with a call-to-action to get the guide