Cardholder Information Security Program

When customers offer their bankcard at the point of sale, over the Internet, on the phone, or through the mail, they want assurance that their account information is safe. That’s why Visa USA has instituted the Cardholder Information Security Program (CISP). Mandated since June 2001, CISP is intended to protect Visa cardholder data–wherever it resides–ensuring that members, merchants, and service providers maintain the highest information security standard.

In 2004, the CISP requirements were incorporated into an industry standard known as Payment Card Industry (PCI) Data Security Standard resulting from a collaboration between Visa and MasterCard to create common industry security requirements. Visa USA maintains CISP as the managing program for data security compliance endorsing the PCI Data Security Standard.

If you are a non-U.S.-based entity, please visit Visa International Account Information Security (AIS).

The new PCI Data Security Standard v1.1 has been released and is now available! Effective September 7, 2006, the PCI Security Standards Council ("PCI SSC") owns, develops, maintains and distributes the PCI Data Security Standard (DSS) and all its supporting documents. Visa USA will, however, continue to manage all CISP compliance enforcement and validation initiatives.