Keeping your contact centre PCI compliant
The Payment Card Industry Security Standards Council (PCI SSC) warns of the risks businesses take if they use pause and resume call recording for processing payments by phone.
Pause and resume – whether manual or automated – only removes the call recording and its storage from PCI DSS scope. It does not address the risks posed by unscrupulous agents, their desktop environment and internal phone systems. PCI SSC’s guidelines are clear: the only solution against fraud and to ensure compliance is to completely remove payment card data from the contact centre environment.
Contact us at Difference Corporation to talk through our payment solutions and channel options.
For more information on PCI SSC’s guidelines, click here.