Top 23 PCI DSS Term and Definition

1. Cardholder: The legal owner of the credit card.

2. Cardholder Data: At a minimum includes the primary account number (PAN), but also may include the cardholder name, service code, or expiration data when stored in conjunction with the account number.

3. Storage of Cardholder Data: Any retention of cardholder data on digital or analog media. Not limited to digital information. Often excludes temporary retention for troubleshooting or customer service purposes.

4. Processing of Cardholder Data: Any manipulation of cardholder data by a computing resource or on physical premises. Not limited to digital information.

5. Transmission of Cardholder Data: Any transfer of cardholder data through a part of the computer network or physical premises. Not limited to digital information.

6. Acquirer (Merchant) Bank: The bank that processes a merchant’s transactions; can be a card brand (in the case of American Express, Discover, and JCB).

7. Issuer Bank: The bank that issues the credit card.

8. Card Brand: Visa, MasterCard, American Express, Discover, or JCB.

9. Authorization: Request to charge a particular amount to the credit card, and a receipt of approval.

10. Clearing: Presentation of a transaction to a payment card brand.

11. Settlement: A process of transferring funds between an acquiring bank and an issuing bank.

12. Open Payment System: A system where the card brand does not act as an acquirer; applies to Visa and MasterCard.

13. Closed Payment System: A system where the card brand acts as an acquirer; applies to American Express, Discover, and JCB.

14. Merchant: Any company that accepts credit cards in exchange for goods or services.

15. Service Provider: Any company that processes, stores, or transmits cardholder data, including companies that provide services to merchants or other service providers.

16. Payment Gateway: A service provider that enables payment transactions, specifically located between the merchant and the transaction processor.

17. Third Party Processor (TPP): A service provider that participates in some part of the transaction process.

18. Data Storage Entity (DSE): A service provider that is not already a TPP.

19. Card Validation Value (CVV): A special value encoded on the magnetic stripe, designed to validate that the credit card is physically present.

20. Card Validation Code (CVC): MasterCard’s equivalent to CVV.

21. Card Validation Value 2 (CVV2): A special value printed on the card, designed to validate that the credit card is physically present.

22. Card Validation Code 2 (CVC2): MasterCard’s equivalent to CVV2.

23. Card Identification Data (CID): American Express’ and Discover’sequivalent to CVV2.