PCI Glossary of Technical Terms

Any computer, software, or equipment that is actually used in the operations of a business, instead of being 'just for testing' or similar.

An Association Member, or Association-approved non-member acting as the agent of a Member, that provides authorization, clearing, or settlement services for merchants and processors: authorizing processors, and clearing processors.

Official, documented rules about how a Merchant's security systems and process/procedures are to operate, what tools should be used, how they should be used, what actions are NOT allowed, and so on.

The device used to process transactions at the checkout. These can be simple swipe-card devices with a pin-pad, or can be joined onto a computer that also handles inventory and other tasks.

A piece of software that sits on a computer and protects it no matter where it goes. It is different from a 'normal' firewall (which is a box that sits in one place on a network and does not move around).

A firewall device that sits at the edge of a network and is designed to protect the network by keeping malicious network traffic out.

A controlled (and officially approved) attempt by someone playing the part of an attacker to see if they can break into a given computer system. It is not necessary that they actually break in: it can be more like 'rattling all the door-knobs to see if any are unlocked'. Any successes that they have can

A system that provides services to Internet merchants for the authorization and clearing of online payment card transactions.

This is an important idea in PCI, and one that Merchants need to understand. The payment card environment includes ALL devices that:       • process payment cards, OR       • store information about payment cards, OR       • that transmit that sort of information, AND ALL devices that connect

This is an important idea in PCI, and one that you need to understand. The Payment Card Environment is that part of your computer network that possesses cardholder data or sensitive authentication data, and those systems and segments that directly attach or support cardholder processing, storage, or transmission. For example, if you have a computer