Erste Card Club awarded the PCI DSS certificate

In order to implement the certification, ECC introduced new and further improved existing already high security controls in the area of business processes, technologies and employees. The main goal of certification is further protection of cardholder data, and consequently clients, throughout all systems that process, transmit or store these data, as well as detailed control and supervision of the handling of cardholder data throughout the entire process of using data. The successful certification is the result of substantial and systematic investment in people, security tools and IT infrastructure.

"ECC's business is almost entirely related to the payment card business, which is why the majority of our processes, employees and technologies fall under the PCI DSS scope. As this was a comprehensive project, almost all of our employees participated in it in some way, and the comprehensiveness of the project also resulted in some positive transformations of our business operations. The PCI DSS certificate itself also implies the obligation to continuously maintain the achieved level of controls, as well as their continuous review and improvement. It should be noted that we see the certification itself as a means, while our goals are entirely oriented towards protecting our clients in order to offer them secure and reliable services in a manner accessible to all," said Jurgen de Ruijter, member of the Erste Card Club Management Board.

The PCI DSS standard defines control goals set by the Payment Card Industry Security Standards Council, which is made up of the major payment card companies: American Express, Discover Financial Services, JCB International, MasterCard, Visa Inc. The Council aims to standardize security controls and ensure their application throughout all elements in the card payment system and related services. In the process, through the PCI standards and other mechanisms, the Council encourages, develops and promotes the culture and awareness of the importance of security in the payment card business.