This set of best practices helps merchants of all sizes and types to protect the consumer card holder data they store, process and transmit. This diligence in inherent in the PABP benchmark, and along the payment chain, means consumers are safeguarded from theft and fraud. The PABP covers a set of 13 requirements that every POS application developer should follow to maintain a high level of security within their applications. Visa USA’s PABP standards:

• Do not retain full magnetic stripe or CVV2 data

• Protect stored data

• Provide secure password features

• Log application activity

• Develop secure applications

• Protect wireless transmissions

• Test applications to address vulnerabilities

• Facilitate secure network implementation

• For Internet-based applications, store cardholder data in internal network only

• Facilitate secure remote software updates

• Facilitate secure remote access to application

• Encrypt sensitive traffic over public networks

• Encrypt internal administrative access