Do you know who your merchants’ service providers are? Do they store, process or transmit cardholder data? Are they PCI compliant? Are they registered with the card networks? If not, you may be at risk.
MasterCard® and Visa require acquirers to register all of their merchants’ service providers who may store, process or transmit cardholder data and to confirm their PCI DSS compliance status. These third-party service providers, which include web hosting companies, shopping cart solutions, and payment gateway providers, present significant risk for account data compromise. In addition, both MasterCard and Visa may fine or otherwise penalize acquiring organizations who allow merchants to use unregistered service providers.
G2 assists in mitigating third-party risk for acquirers and significantly streamlines the process of identifying and registering your merchants’ third-party providers (also referred to as Common Points of Service, or CPSs). G2 analysts identify your merchants’ CPSs and drive them to CPSRegistration.org, where they can provide the information needed to register them with the card networks. Acquirers need only log in, review the registration information, perform any necessary due diligence, and submit the registration information to the card networks in just a few clicks.