Report: Larger Merchants More Concerned with Data Security

Nov. 4, 2011

Merchants with 10 or fewer employees do not believe PCI compliance will protect their businesses, according to a survey sponsored by ControlScan and Merchant Warehouse. A “Perfect Storm” of Complacency: The Third Annual Industry Survey of Level 4 Merchant PCI Compliance Trends found 48 percent of such “micro-merchants” polled were either “unsure” of or “not at all familiar” with the Payment Card Industry Data Security Standard. Seventy-nine percent of larger Level 4 merchants (more than 50 employees), on the other hand, report they consider data protection a high priority. “We are encouraged by both the adoption and serious thought large Level 4 and e-commerce merchants are putting into their security posture and compliance, which we find directly related to the education and resources they receive on PCI compliance,” said Joan Herbig, CEO of ControlScan. “There is still a tremendous opportunity, however, for ISOs and acquirers to share that same education with micro-merchants in order to guide them through PCI compliance by setting stronger repercussions for non-compliance and establishing data security as an ongoing process.”