article thumbnail

PCI requirements and who needs to follow them

Basis Theory

Third-Party Service Provider ( TPSP or "service provider") refers to an entity other than the Merchant, Acquirer, or Issuer involved in storing, processing, or transmitting card data. Another precaution worth highlighting is the use of multi-factor authentication (MFA). Don't, however, let the term "merchants" fool you.

PCI DSS 88