Remove Compromise Remove MFA Remove TPSP
article thumbnail

PCI requirements and who needs to follow them

Basis Theory

Third-Party Service Provider ( TPSP or "service provider") refers to an entity other than the Merchant, Acquirer, or Issuer involved in storing, processing, or transmitting card data. To ensure the keys themselves aren’t compromised, PCI provides guidance for key management (generation, storing, TTL, retirement, etc.)

PCI DSS 88