Payment Card Industry (PCI) Data Security Standard (DSS) version 4.0 validation through Clover Security (nisc.cloversecurity.com) is here for NISC Members! Version 3.2.1 of the PCI DSS standard was formally retired on March 31, 2024. The only approved standard now is v4.0. In preparation for those changes, Clover Security updated their portal in early March, but additional changes were needed to be made, which are now in place.

In addition, we have updated our PCI Toolkit on the NISC Community with revised screenshot-by-screenshot guides to provide guidance for our Members in attesting to their PCI compliance under PCI DSS v4.0.

If your organization accepts credit card payments and uses Fiserv as your acquiring bank and processor for those payments, this is an annual requirement governed by your contract with Fiserv, and it is your responsibility to ensure you comply with those obligations.

If you have used the Clover Security portal to attest to your PCI Compliance between and including March 8 through June 12, 2024, you will need to log into the Clover Security portal and “re-profile” to correct any inaccurate applicability requirements, including the likelihood of removing the quarterly ASV scan requirement. To “re-profile,” go to the Business Profile card and click Manage, then Re-profile. Members that have attested before March 8 can wait to re-attest until their next annual renewal date which is a year from the last time submitted. Members that have not attested in more than a year should visit our PCI Toolkit and prioritize validating their PCI compliance.

If you need assistance with your login or contact information with the Clover Security website, you can reach out to the Clover Security support team at 866.957.1807 (Monday through Friday, 7 a.m. to 7 p.m. Central Time) or email support@compliance.clover.com.

If you have any questions for NISC regarding the information on the NISC Community in the PCI Toolkit, please do not hesitate to reach out to the NISC Cybersecurity team at 866.999.6472 (Option 3, then extension 7171) or email cybersecurity@nisc.coop.

Important Note: This communication was sent to all Member contacts marked as the primary contact with NISC. Please ensure this email is forwarded to the person or team who has been tasked with overseeing your organization’s PCI compliance.

You are receiving this e-mail from NISC because you are a Member or Customer. To ensure that you continue to receive e-mails from us, please add mailing@nisc.coop to your address book today. This e-mail message is for the sole use of the intended recipient (s) and may contain confidential and privileged information. Any unauthorized review, copying, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. Thank you.