Subject: Fw: PCI Certification [ACTION REQUIRED]
From: "Mike" <[email-masked]>
To: "Joey Sheets" <[email-masked]>
Date: Tue, 27 Apr 2010 07:44:45 -0400

Is this still being worked on?
Thank you,
Michael Bishop
Labor Law Poster Service
Phone 877-321-4144
Fax 888-442-4144
[email-masked] 
----- Original Message ----- 
From: PayPal 
To: [email-masked] 
Sent: Monday, April 26, 2010 7:17 PM
Subject: PCI Certification [ACTION REQUIRED]

     
      Dear Mike Bishop,

      Thank you for choosing PayPal for your payment processing needs. 

      To complete your processing needs, you're required to meet Payment Card Industry (PCI) standards within your business. 

      You have 90 days from the date of this notice to provide certification of compliance. If you can't complete a plan of action to become PCI compliant within 90 days, you need to contact PayPal.

      As your payment processor, we must validate your compliance to these industry requirements. Your compliance includes meeting the minimum online security standards mandated by PCI Data Security. To meet these security standards, you need to enroll with a Visa or MasterCard-certified security vendor for PCI certification services.  These services must include a quarterly security scanning of your office and store internet connections and website as well as the completion of a Security Self-Assessment questionnaire.

      You can find information on the PCI Security standards at www.pcisecuritystandards.org. The MasterCard website, www.mastercard.com/sdp, and the Visa website, www.visa.com/cisp, contain more information on security programs.

      Here's how your business can become and stay PCI-compliant:

      1.    Complete and pass the annual security self-assessment questionnaire.

      2.    Complete and pass quarterly security scans of your internet infrastructure.

      3.    Get your certificate of compliance.

      4.    Fax your certificate to PayPal at (303)395-2821.

      If your business fails to become PCI-compliant, PayPal places a 100% reserve on your merchant account funds.  This reserve remains in place until all compliance requirements have been met. Continued failure to comply results in an impact to the processing relationship with disabling your Website Payments Pro and/or Virtual Terminal.  

      We can help your business become PCI-compliant by offering you a cost-saving compliance resource. We've contracted with McAfee, a Visa- and MasterCard-certified PCI vendor, to help our members reach compliance with six devices at no cost for the first year. You can enroll, online, with McAfee at https://www.mcafeesecure.com/Affiliate.sa?a=15751&u=21865&c0=269&k0=SJ2VqSgTpg&framed=Y.

      If you have any questions, please contact me at [email-masked].

      Your diligence in this matter protects your customer, your business, and your processing relationship with us. 

      We value your business and appreciate your cooperation.

      Thanks, 

      Janet Vaughan

      © 2010 PayPal Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.