---
title: "PCI Compliance and Your Business - Get a Free Network Security Consultation in South Florida"
description: "Today, we will take a look at PCI DSS compliance and what it means for your business."
url: "https://www.l7solutions.com/blog/pci-compliance-and-your-business"
date: "2026-06-19T23:27:26+00:00"
language: "en-GB"
---
## Get a Free Network Security Consultation in South Florida
Get a free network security consultation today from L7 Solutions. We are your partner for managed services & IT support in South Florida and beyond. Call today.
[ Categories ](https://www.l7solutions.com/blog/categories "Categories")
[ Tags ](https://www.l7solutions.com/blog/tags "Tags")
[ Categories: All Categories ](https://www.l7solutions.com/javascript:void(0); "Categories")
Search...Suggested keywords
[ x ](https://www.l7solutions.com/javascript:void(0);)
# PCI Compliance and Your Business
[LSeven Solutions Blog](https://www.l7solutions.com/blog/categories/blog) [Security](https://www.l7solutions.com/blog/categories/security)
[LSeven Solutions Admin](https://www.l7solutions.com/blog/blogger/l7-admin)
Monday, 15 June 2020
[ 0 Comments ](https://www.l7solutions.com/blog/pci-compliance-and-your-business#comments)
[  ](//www.l7solutions.com/images/easyblog_shared/June_2020/6-15-20/195161376_pci_dss_400.jpg "PCI Compliance and Your Business")
The days of the cash-only business are over. It doesn’t matter if your business is a multinational corporation or you cut grass for a living, accepting payment cards is not only convenient for your customers, most of the time it’s the most secure way to get paid. In an effort to protect the personal and financial information of consumers who have come to depend on their payment cards, the banks that back the credit card industry have developed a regulation that businesses who process cards need to adhere to. Today, we will go over this regulation and how it affects small and medium-sized businesses
## Unpacking PCI
What is known as PCI Compliance, is actually the Payment Card Index Digital Security Standard (PCI DSS). It was established in 2006 as an industry-wide standard, sponsored by what is now known as the PCI Security Standards Council made up of some pretty familiar names: Visa, Mastercard, American Express, and Discover. The council was established to regulate the credit card industry and manage the standards in which businesses would be held to improve consumer privacy.
The first thing you should know is that PCI standards apply to all businesses that accept payment cards. If your business stores information or processes payment using digital payment, you have to maintain PCI compliance. Here are 10 actions every business that accepts payment cards needs to take:
1. Change passwords from system default
2. Install all sufficient network security tools (antivirus, firewalls, etc.) that will work to protect card data
3. Encrypt transmission of card data across public networks
4. Restrict the transmission of card and cardholder data to “need to know” basis
5. Assign user ID to all users with server or database access
6. Make efforts to protect physical and digital access to card and cardholder data
7. Monitor and maintain system security
8. Test system security regularly
9. Create written policies and procedures that address the importance of securing cardholder data
10. Train your staff on best practices of accepting payment cards
Again, every single business that accepts the use of payment cards needs to be sure to accomplish these 10 things. Many businesses already do these things in the normal course of doing business, but if you don’t, and you accept payment cards, you are not in compliance and face severe rebuke.
## PCI and Business Size
Once you understand the global actions your business needs to take to stay in compliance, you then need to understand what level of merchant you are. According to the PCI Security Standards Council there are four levels of businesses that process credit cards. They are defined as follows:
- **Merchant Level #1** - A business that processes over six million payment card transactions per year.
- **Merchant Level #2** - A business that processes between one million-to-six million payment card transactions per year.
- **Merchant Level #3** - A business that processes between 20,000-to-one million e-commerce payment card transactions per year.
- **Merchant Level #4** - A business that processes less than 20,000 e-commerce payment transactions, and fewer than one million overall payment card transactions per year.
Since a breach at level 1 will likely affect more consumers, the PCI regulatory body--that doesn’t have the means to constantly check every business--spends more time regulating larger organizations than it does smaller businesses. That’s not to say that small businesses can’t face hefty fines and consumer attrition if they are non-compliant. Each level has its own specific mandate. Let’s go through them now.
**Merchant Level #1**
Doing massive business online and otherwise brings with it more responsibility. To maintain PCI compliance, Level one merchants need to:
- Perform a yearly Report on Compliance (ROC) through a Qualified Security Assessor (QSA)
- Allow an Approved Security Vendor (ASV) to complete a quarterly network scan
- Complete the Attestation of Compliance Form for PCI Council records
**Merchant Level #2**
As transactions begin to decrease there are less stringent standards. Level two’s include:
- Perform a yearly Self-Assessment Questionnaire (SAQ)
- Allow an ASV to complete a quarterly network scan
- Complete the Attestation of Compliance Form for PCI Council records
**Merchant Level #3**
Many medium-sized businesses will fall under this level and need to:
- Perform a SAQ
- Allow an ASV to complete a quarterly network scan
- Complete the Attestation of Compliance Form for PCI Council records
**Merchant Level #4**
The majority of small business fall into level #4 status and like level’s two and three need to:
- Perform a SAQ
- Allow an ASV to complete a quarterly network scan
- Complete the Attestation of Compliance Form for PCI Council record
Businesses found to be in noncompliance will often be subject to review and are often fined, given extra scrutiny, or have their privilege to accept payment cards revoked. Don’t allow this to happen to your business. If you have any questions about PCI DSS standards, or how to keep your business in compliance, call the IT professionals at COMPANYNAME today at PHONENUMBER.
[ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/javascript:void(0);)
Tags:
[Compliance](https://www.l7solutions.com/blog/tags/compliance) [Regulations](https://www.l7solutions.com/blog/tags/regulations) [PCI DSS](https://www.l7solutions.com/blog/tags/pci-dss)
[ Tip of the Week: How to React When Your Workspace ... ](https://www.l7solutions.com/blog/tip-of-the-week-how-to-react-when-your-workspace-shifts)
[ Not All Threats are External ](https://www.l7solutions.com/blog/not-all-threats-are-external)
About the author
[  ](https://www.l7solutions.com/blog/blogger/l7-admin)
[LSeven Solutions Admin](https://www.l7solutions.com/blog/blogger/l7-admin)
[ ](https://www.l7solutions.com/javascript:void(0); "Subscribe to updates from author") [ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/blog/blogger/l7-admin)
Welcome to LSeven's Blog! Here we will share useful tips and tricks for Computers and Information on Our IT Services!
Author's recent posts
[More posts from author](https://www.l7solutions.com/blog/blogger/l7-admin)
[ Tuesday, 30 June 2026 Stop Managing Metal, Start Managing People: A Guide to Hybrid IT ](https://www.l7solutions.com/blog/stop-managing-metal-start-managing-people-a-guide-to-hybrid-it)
[ Saturday, 27 June 2026 Free AI is Not Free: Why Public Tools Are a Security Risk ](https://www.l7solutions.com/blog/free-ai-is-not-free-why-public-tools-are-a-security-risk)
[ Thursday, 25 June 2026 Phishing is Getting Sophisticated: The New Threats Businesses Face ](https://www.l7solutions.com/blog/phishing-is-getting-sophisticated-the-new-threats-businesses-face)
Comments
No comments made yet. Be the first to submit a comment
**** Already Registered? [Login Here](https://www.l7solutions.com/component/users/login?return=aHR0cHM6Ly93d3cubDdzb2x1dGlvbnMuY29tL2Jsb2cvcGNpLWNvbXBsaWFuY2UtYW5kLXlvdXItYnVzaW5lc3M=&Itemid=101)
Friday, 19 June 2026
Subscribe to the blog (Please fill in your email address to subscribe to updates from this post.)
**Captcha Image**
## Schema
```json
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"position": 1,
"name": "Home",
"item": "https://www.l7solutions.com"
},
{
"@type": "ListItem",
"position": 2,
"name": "Blog",
"item": "https://www.l7solutions.com/blog"
},
{
"@type": "ListItem",
"position": 3,
"name": "LSeven Solutions Admin",
"item": "https://www.l7solutions.com/blog/blogger/l7-admin"
},
{
"@type": "ListItem",
"position": 4,
"name": "PCI Compliance and Your Business",
"item": "https://www.l7solutions.com/blog/pci-compliance-and-your-business"
}
]
}
```