--- title: Is your e-Commerce compliant with PCI DSS revisions? description: e-Commerce has always been a target for swift cyber theft. You may not even realize that your technology has been compromised by cybercriminals, until after the breach. Nothing is bulletproof, not even standards such as PCI DSS (Payment Card Industry Data Security Standard). However, it at least offers some defense. image: https://blog.e-zest.com/hubfs/Is%20your%20e-Commerce%20compliant%20with%20PCI%20DSS%20revisions.png --- [![e-Zest logo\_An accion lab company\_Colour](https://blog.e-zest.com/hubfs/images/Logos%20with%20Tagline/Corporate/SVG/e-Zest%20logo_An%20accion%20lab%20company_Colour.svg "e-Zest logo_An accion lab company_Colour")](https://www.e-zest.com/) - [WORK](https://www.e-zest.com/our-work) - [SERVICES](https://www.e-zest.com/our-services) - [Product Engineering](https://www.e-zest.com/digital-product-engineering-services) - [Enterprise Data Services](https://www.e-zest.com/enterprise-data-services) - [Digital Commerce](https://www.e-zest.com/digital-commerce-services) - [Digital Operations](https://www.e-zest.com/digital-operations) - [Digital Consulting](https://www.e-zest.com/digital-transformation-consulting-services) - [Digital Experience Design](https://www.e-zest.com/digital-experience-design) - [INSIGHTS](https://blog.e-zest.com/) - [CAREERS](https://www.e-zest.com/careers) - [ENTERPRISE DATA SERVICES](https://www.e-zest.com/enterprise-data-services) - [GENERATIVE AI](https://www.e-zest.com/generative-ai) - [Healthcare](https://healthcare.e-zest.com) - [Contact Us](https://www.e-zest.com/contact-us) - ![Elevating Product Engineering with AI and ML](https://blog.e-zest.com/hubfs/Elevating%20Product%20Engineering%20with%20AI%20and%20ML.jpg) [BLOGS](https://blog.e-zest.com) #### Elevating Product Engineering with AI and ML As technology evolves and customer choices broaden, there is an increasing ... [Read more](https://blog.e-zest.com/elevating-product-engineering-with-ai-and-ml) - ![e-Zest – An Accion Labs Company gets Recognition as a Contender in the ISG Provider Lens™ Study on Digital Engineering Services 2024](https://blog.e-zest.com/hubfs/e-Zest%20%E2%80%93%20An%20Accion%20Labs%20Company%20-%20Gets%20Recognition%20as%20a%20Contender%20in%20the%20ISG%20Provider%20LensTM%20Study%20on%20Digital%20Engineering%20Services%202024.jpg) [NEWS](https://blog.e-zest.com/news) #### e-Zest – An Accion Labs Company gets Recognition as a Contender in the ISG Provider Lens™ Study on Digital Engineering Services 2024 We are delighted to announce that e-Zest – An Accion Labs Company has been ... [Read more](https://blog.e-zest.com/news/e-zest-an-accion-labs-company-gets-recognition-as-a-contender-in-the-isg-provider-lens-study-on-digital-engineering-services-2024) - ![e-Zest Solutions supports Digital Pune Mission](https://blog.e-zest.com/hubfs/blog-files/Digital%20Literacy%20Bus%20e-Zest.png) [CSR](https://blog.e-zest.com/csr) #### e-Zest Solutions supports Digital Pune Mission **Pune, India:** e-Zest Solutions, a leading digital technology innovation ... [Read more](https://blog.e-zest.com/csr/e-zest-solutions-supports-digital-pune-mission) - [Work](https://www.e-zest.com/our-work) - [Services](https://www.e-zest.com/our-services) - [Insights](https://blog.e-zest.com) - [Careers](https://www.e-zest.com/careers) - [Enterprise Data](https://www.e-zest.com/enterprise-data-services) - [Generative AI](https://www.e-zest.com/generative-ai) - [Innovations](https://www.e-zest.com/innovations) - [Healthcare](https://healthcare.e-zest.com) - [About](https://www.e-zest.com/about-us) - [Contact](https://www.e-zest.com/contact-us) - [Blog](https://blog.e-zest.com/) - [News](https://blog.e-zest.com/news) - [CSR](https://blog.e-zest.com/csr) - [![Linkedin Icon](https://blog.e-zest.com/hubfs/icons/linkedin_icon_white.svg)](https://www.linkedin.com/company/e-zest-solutions/) - [![Twitter Icon](https://blog.e-zest.com/hubfs/twitter-logo-silhouette%20(5).svg)](https://twitter.com/ezest) - [![Facebook Icon](https://blog.e-zest.com/hubfs/facebook-app-logo%20(4).svg)](https://www.facebook.com/61259256638) - [![Instagram Icon](https://blog.e-zest.com/hubfs/instagram-logo%20(4).svg)](https://www.instagram.com/ezestsolutions/) - [![Youtube Icon](https://blog.e-zest.com/hubfs/icons/youtube_icon_white.svg)](https://www.youtube.com/user/ezestcorporate) [![Go to top icon](https://blog.e-zest.com/hubfs/AA%20Assets/top%20button.svg)](https://blog.e-zest.com/is-your-e-commerce-compliant-with-pci-dss-revisions#top) Hit enter to search or ESC to close Insights e-Zest members share technology ideas to foster digital transformation. - [Blog](https://blog.e-zest.com) - [Whitepaper](https://blog.e-zest.com/whitepaper) - [Playbook](https://blog.e-zest.com/playbook) - [News](https://blog.e-zest.com/news) - [Innovation](https://blog.e-zest.com/innovation) - [Media Kit](https://www.e-zest.com/media-kit) # Is your e-Commerce compliant with PCI DSS revisions? [Mariam Abuhaideri](https://blog.e-zest.com/author/mariam-abuhaideri) Jun 14, 2018 [PCI DSS](https://blog.e-zest.com/topic/pci-dss) [GDPR](https://blog.e-zest.com/topic/gdpr) [eCommerce](https://blog.e-zest.com/topic/ecommerce) - - - - e-Commerce has always been a target for swift cyber theft. You may not even realize that your technology has been compromised by cybercriminals, until after the breach. Nothing is bulletproof, not even standards such as PCI DSS (Payment Card Industry Data Security Standard). However, it at least offers some defense. The only constant in life and in the life of technology is transformation. As such you have to adapt or transform yourself to survive and to secure your position. Even security standards would become worthless unless they dynamically changed along with the world. You might be wondering why you need to pay two hoots to all this talk about security standards - too much work for nothing - and you choose to ignore. Agreed that scrutinized attention to new compliance standards translates to added work and expense, but it is more than worth it in order to avoid the risk of a data breach that could destroy the reputation and financial viability of your business. The key in ensuring that technology works in your favor rather than against you lies in encryption, which ensures that your data does not get compromised, or even if it does, it becomes meaningless to an unauthorized predator. With each new hacking advancement, cyber security becomes more robust and the vicious cycle continuous. The good news is that a cure is always instituted. Luckily for us, a new version of the cure will be offered on June 30th. Are you willing to protect your balance sheets? ![PCI policy](https://blog.e-zest.com/hs-fs/hubfs/PCI%20polic.png?width=753&name=PCI%20polic.png) So the first version of PCI DSS debuted on December 15, 2004. What then does June 30th mean? As with every technology or rule, PCI DSS has also been subject to revisions. We expect the complete migration from SSL/early TLS to a more secure encryption protocol- TLS 1.1 or higher in order to meet the PCI Data Security Standard (PCI DSS) for safeguarding payment data. If your organization has an e-Commerce presence or partners with e-Commerce companies no matter how small or big, read on for key advise to alleviate the risk of being breached. ![TSL (Secure Socket Layer) and Transport Layer Security (TLS)](https://blog.e-zest.com/hs-fs/hubfs/TSL%20(Secure%20Socket%20Layer)%20and%20Transport%20Layer%20Security%20(TLS).png?width=856&name=TSL%20(Secure%20Socket%20Layer)%20and%20Transport%20Layer%20Security%20(TLS).png) So what can you do to prepare your e-Commerce website for the change? Make sure the server your site is hosted on is compatible with this new protocol. TLS 1.1 and 1.2 will not be supported for Microsoft Windows-hosted websites or web apps, by anything older than Windows Server 2008. Ensure that your on-site and off-site servers do not default to SSL or TLS 1.0. Your IT team (or third-party hosting partner) will need to be vigilant about the migration. Notify your customers that older operating systems will not be able to access your site after June 30. They would need to update their OS. With this message you are conveying to them that you take security seriously and therefore even though updating is a pain, it is only meant to protect them in the long run. Isolate your servers and opt for more secure bases. Ensure you know exactly where your client’s data is stored and how secure your infrastructure is. With June 30 rapidly approaching, it is time to start migrating to TSL 1.1 or 1.2. If you haven’t already, reach out to your webmaster or web developer to discuss the steps needed to get your online payments compliant before the deadline or risk losing your ability to take credit card payments. And small businesses are more susceptible to attacks. So if you are small and thinking your system does not come under these regulations, then you would be digging your own grave in the advent that a client’s data is violated. Not to mention the harsh fines you would have to pay if you do not comply with PCI, but won’t be worse than the impact it would have on your brand image and the loss of trust for not taking security seriously. Make no mistake in relating PCI compliance to GDPR. GDPR is a requirement if you do business in the EU and with residents of the EU. PCI DSS is a regulation that governs all credit card transactions even if your business is only you. Got questions? Let’s discuss in comments. - - - ### Similar Blog [![What is PCI DSS compliance and how to become PCI DSS compliant?](https://blog.e-zest.com/hubfs/Everything%20you%20need%20to%20know%20about%20PCI%20DSS%20compliance.jpg) What is PCI DSS compliance and how to become PCI DSS compliant? What is PCI compliance? By Rohidas Bagul Nov 08, 2017](https://blog.e-zest.com/pci-dss-compliance-and-how-to-become-pci-dss-compliant) [![Understanding Regulatory Compliance: PCI DSS Cloud Computing Guidelines](https://blog.e-zest.com/hs-fs/file-3586007425-jpg/blog-files/pci-dss.jpg) Understanding Regulatory Compliance: PCI DSS Cloud Computing Guidelines PCI DSS compliant means complete ownership of the responsibility of the cardholder data (CHD). The client must still ensure they ... By Devendra Dhawale May 07, 2013](https://blog.e-zest.com/understanding-regulatory-compliance-pci-dss-cloud-computing-guidelines/) [Understanding Regulatory Compliance in Amazon Web Services (AWS) cloud The problem of regulatory PCI compliance in public cloud such as AWS applies more to small and medium size companies than ... By Devendra Dhawale Apr 30, 2013](https://blog.e-zest.com/understanding-regulatory-compliance-in-amazon-web-services-aws-cloud/) [![Considerations for PA-DSS Compliant Solution Development - Part 1](https://blog.e-zest.com/hs-fs/file-3443236272-png/blog-files/pci.png) Considerations for PA-DSS Compliant Solution Development - Part 1 Following are the considerations for the development and Implementation of software solutions in a PCI-DSS Compliant Environment. ... By Lalit Kale May 04, 2012](https://blog.e-zest.com/considerations-for-pa-dss-compliant-solution-development-part-1/) [![Managing your future with a Technology Partner](https://blog.e-zest.com/hubfs/Managing%20your%20future%20with%20a%20Technology%20Partner%20(2).png) Managing your future with a Technology Partner This blog is meant to be an abridged guide to help you pick the right technology management partner. It is a no-brainer that ... By Mariam Abuhaideri Jun 22, 2018](https://blog.e-zest.com/managing-your-future-with-a-technology-partner) [![The paradigm shift from manual to intelligent digital marketing](https://blog.e-zest.com/hubfs/The%20paradigm%20shift%20from%20manual%20to%20intelligent%20digital%20marketing.png) The paradigm shift from manual to intelligent digital marketing We live in innovative times where we do not attribute creativity only to the artist. In today’s times, every profession demands ... By Mariam Abuhaideri May 25, 2018](https://blog.e-zest.com/the-paradigm-shift-from-manual-to-intelligent-digital-marketing) [![The Digital Journey of Hospitality and Travel industries](https://blog.e-zest.com/hubfs/travel%20blog%20graphic.png) The Digital Journey of Hospitality and Travel industries As an avid traveler, I have a knack for the curious. Last evening, post work, I had a date with Google planning my next travel ... By Mariam Abuhaideri Mar 29, 2018](https://blog.e-zest.com/the-digital-journey-of-hospitality-and-travel-industries) [![An Inevitable Affair- Blockchains and eCommerce](https://blog.e-zest.com/hubfs/An%20Inevitable%20Affair-%20%20Blockchains%20and%20eCommerce.jpg) An Inevitable Affair- Blockchains and eCommerce After it was first adopted in 2009 by Satoshi Nakamoto to create a digital cryptocurrency Bitcoin, blockchain has now been ... By Mariam Abuhaideri Mar 27, 2018](https://blog.e-zest.com/an-inevitable-affair-blockchains-and-ecommerce) ## Helping Organizations Thrive in the Digital Age [Contact Us](https://www.e-zest.com/contact-us) - [About](https://www.e-zest.com/about-us) - [Services](https://www.e-zest.com/our-services) - [Work](https://www.e-zest.com/our-work) - [Insights](https://blog.e-zest.com/) - [Healthcare](https://healthcare.e-zest.com/) - [Accion Labs](https://www.accionlabs.com/) - - - - - - Dallas - Detroit - Hannover - Vienna - London - Pune © 2025 e-Zest Solutions - [Privacy Policy](https://www.e-zest.com/privacypolicy) - [Cookie Policy](https://www.e-zest.com/cookie-policy) Contact us Contact us e-Zest is a leading digital innovation partner for enterprises and technology companies that utilizes emerging technologies for creating engaging customers experiences. Being a customer-focused and technology-driven company, it always helps clients in crafting holistic business value for their software development efforts. It offers software development and consulting services for cloud computing, enterprise mobility, big data and analytics, user experience and digital commerce.