Inside Tufts

Information Security

Credit Card Security Requirements

Visa CISP (Cardholder Information Security Program)
This industry standard was established in September 2000 and requires that Visa merchants protect cardholders by establishing security and privacy practices. It has been mandated since 2001.
nCipher Overview
Visa's Cardhold Information Security Program
Payment Card Industry (PCI) Data Security Standard
Announced on December 16, 2004, PCI compliance is required by June 30, 2005. PCI is a single industry standard based on Visa, MasterCard, American Express, Discover and JCB security standards.
CyberSource's PCI Compliance Requirements matrix in pdf format.
PCI Data Security Standard manual in pdf format.