American Express Egypt - Data Security

Web Content Viewer (JSR 286)

Data Security and Best Practice

The Data Security Operating Policy

Keeping Cardmember information safe and secure is an important part of your agreement to accept American Express® Cards. Compromised data has a negative impact on everyone involved, but there are steps you can take toward minimizing this threat and maintaining customer trust.

Protecting data can help:

Improve customer relationships
Increase overall profitability
Prevent damage to your business' reputation

What else can you do to protect Cardmember information?

Follow the PCI Data Security Standard

Use these global data security standards adopted by payment card brands to ensure that all of your customer information is as secure as possible.

See the PCI Data Security Standards

Change your password

This is one of the easiest ways to help prevent data incidents. Small, easy to remember improvements to passwords can make a huge difference in the time it takes to crack a password.

Quick resources

From firewalls to chip technology, watch these short videos for a better understanding of data security basics.

Go to the PCI site to learn more

Data Security Training

Check out the data security awareness training available to you and your employees.

Go to the PCI site to learn more

Take these recommended steps from the PCI web site toward securing your systems against data incidents.

Goals	PCI DSS requirements
Build and Maintain a Secure Network and Systems	Install and maintain a firewall to protect Cardholder data. Do not use vendor-supplied defaults for system passwords and other security parameters.
Protect Cardholder Data	Protect stored Cardholder data. Encrypt transmission of Cardholder data across open, public networks.
Maintain a Vulnerability Management Program	Protect all systems against malware and regularly update anti-virus software or programs. Develop and maintain secure systems and applications.
Implement Strong Access Control Measures	Restrict access to Cardholder data by business needs, to know, identify and authenticate access to system components. Restrict physical access to Cardholder data.
Regularly Monitor and Test Networks	Track and monitor all access network resources and Cardholder data. Regularly test security systems and processes.
Maintain an Information Security Policy	Maintain a policy that addresses information security for all personnel.

Go to the PCI site to read more

Goals	PCI DSS requirements
Build and Maintain a Secure Network and Systems	Install and maintain a firewall to protect Cardholder data. Do not use vendor-supplied defaults for system passwords and other security parameters.
Protect Cardholder Data	Protect stored Cardholder data. Encrypt transmission of Cardholder data across open, public networks.
Maintain a Vulnerability Management Program	Protect all systems against malware and regularly update anti-virus software or programs. Develop and maintain secure systems and applications.
Implement Strong Access Control Measures	Restrict access to Cardholder data by business needs, to know, identify and authenticate access to system components. Restrict physical access to Cardholder data.
Regularly Monitor and Test Networks	Track and monitor all access network resources and Cardholder data. Regularly test security systems and processes.
Maintain an Information Security Policy	Maintain a policy that addresses information security for all personnel.

Go to the PCI site to read more

Data Security and Best Practice

The PCI Data Security Standard

The PCI Data Security Standard