Web Site Security for Catalogers

To get the CISP guidelines, search for “PCI self-assessment questionnaire” at http://usa.visa.com.

The guidelines offer best practices to harden your routers, servers and databases against hackers. For example, encrypt credit card numbers immediately upon collection, store credit card numbers in your databases in encrypted format, and decrypt numbers only when needed for processing. The guidelines also require the CVV2 field never be stored.