Maestro Global Rules (PDF) - MasterCard

8.1 Compliance
Security
8.1 Compliance
The Corporation may request compliance reports in the form of checklists
and attestations, on-site security reviews, audits, or a combination of the
aforementioned at any time.
Customers must comply with all current editions of the security-related
requirements for each product or device, such as:
1. Compliance Assessment and Security Testing (CAST) Program for chip
implementation and Mobile Payment Device issuance
2. PIN and Terminal Security—PIN Entry Devices (PEDs) and Encrypting PIN
Pads (EPPs)
PCI Approved PIN Entry Devices
Payment Card Industry EPP Security Requirements
Payment Card Industry POS PED Security Requirements
3. PIN and Terminal Security—PIN Security
Payment Card Industry PIN Security Requirements
4. any other requirements published by the Corporation from time to time.
Issuers should also refer to the Issuer PIN Security Guidelines.
The above-referenced publications can be located on MasterCard
Connect. Payment Card Industry publications are located online at
www.pcisecuritystandards.org.
8.2 Terminal Compliance Requirements
Terminals that participate in Corporation Activities must be compliant with all
of the requirements set forth in this Chapter 8, “Security,” of the Rules. If a
Terminal is not compliant with one or more of the requirements contained in
this chapter, the Acquirer must immediately disconnect that Terminal from the
Interchange System or face the imposition of noncompliance assessment fees,
possible liability for any subsequent fraudulent Transactions that result from
the noncompliant status of the Terminal, and/or termination of its License to
participate in Corporation Activities.
8.3 Customer Compliance with Card Production Standards
A Customer engaged in Card production for itself or for other Customers, must
comply at all times with all Standards applicable to any vendor approved by
the Corporation, including but not limited to those set forth in this chapter and
in the following documents:
©1993–2012 MasterCard. Proprietary. All rights reserved.
Maestro Global Rules • 9 November 2012 8-1