The PCI DSS is a comprehensive set of requirements for enhancing cardholder data security around the storage and handling of customer credit card information/data. Developed by the founding payment brands MasterCard Worldwide, Visa International, American Express, Discover Financial Services and JCB. The standard was developed to help facilitate the broad adoption of consistent data security measures on a global basis. The five founding members jointly formed an independent regulatory organization called the PCI Security Standards Council (PCI SSC) to promulgate the Standard. The PCI DSS reflects an agreed position on the combination of each of the credit card brands’ security standards. SAMA had mandated all Saudi Banks to comply with this standard.

The PCI DSS certification came as an extension of the management’s efforts to provide the best banking services with the highest degree of excellence and security, in line with the bank’s strategy and ongoing commitment to applying the latest in information security technology and in compliance to regulator mandates (SAMA).

SHB has been awarded the PCI DSS v.20 certification on May 2011 as the first local bank who got this certification from first time and after passing a comprehensive assessment process conducted by the Control Case organization, which operates in certification process and is accredited by the Standards Board of Banking Cards Information Security.

Control Case carried out extensive Audit on the bank’s information systems and networks to ensure the application and execution of solutions related to information security. Additionally, the company conducted a detailed review of the bank’s documents and work procedures as well as interviews and tours to ensure the practical application of the global standard requirements.

The certification would bolster customer confidence in the bank and would also motivate the bank to continue applying the best contemporary practices and technologies to maintain the security and safety of partner information.