Developer Security Best Practices - Sponsored Whitepaper

The importance of strong security cannot be overvalued for any successful business. A security breach can result in significant financial loss, irreparable damage to reputation or worse. Information security should therefore be of the utmost concern when developing computer applications that handle, process, or store consumer information. This document provides information about payments industry security initiatives and other best practices that are recommended to developers for incorporating the highest levels of data protection in their various payment applications.

The Card Associations employ stringent data protection compliance requirements for merchants and merchant service providers, including businesses or other parties that provide payment processing solutions to merchants. Two specific programs, the Payment Card Industry (PCI) Data Security Standard and the Payment Applications Best Practices (PABP), are vital to the long term success of your business. Authorize.Net encourages you to read the following sections thoroughly so as to understand both PCI and PABP and their specific requirements for you and your merchants.

Payment Card Industry (PCI) Data Security Standard The PCI Data Security Standard is an industry-wide program implemented in December 2004 that incorporates the various cardholder security programs previously created by Visa, MasterCard, Discover, and American Express. PCI is designed for merchants and merchant service providers (including developers) that handle, process, and/or store cardholder information. Recognizing that a merchant’s security needs vary according to its size and the number of transactions it processes, the PCI Data Security Standard has been divided into separate levels of required merchant and developer compliance.

To support your efforts to optimize security, Authorize.Net has partnered with AmbironTrustWave, a leading data security and compliance services provider that offers convenient and affordable PCI compliance tools. For more information about AmbironTrustWave’s services and pricing options, please visit http://www.

authorizenet.trustkeeper.net. You will need to register in order to log in. You can also