Case Study
PCI DSS – Century Mail
PCI DSS Case Study – Century Mail PUBLIC © 2019 URM Page: 1 of 2 Background Century Mail, with its headquarters in Hong Kong, provides a wide range of products (including health, leisure, fashion, household and outdoors) to a mature end-user client base predominantly based in Australia and New Zealand. Customers can purchase products via the following channels: - Phone – handled by third party call centre based in the Philippines - Website – using PayPal as the payment processor - Mail order – coupons sent into a third party partner for fulfilment. Century Mail processes card payments through all three of these channels and (as can be observed above) is reliant on third parties for its compliance with the Payment Card Industry Data Security Standard (PCI DSS). During 2015,