Credit Card companies are requiring compliance with PCI standards for every entity that is involved in the storage, processing, or transmission of credit card information. Failure to comply can result in denial or revocation of your organization's ability to process credit cards.
Furthermore, as these standards have become widely recognized, non-compliance places your organization at risk of legal and/or civil consequences if credit card information becomes compromised.
Compliance with PCI standards is necessary whether or not you use Plesk Customer & Business Manager to process transactions online. Even if you use a POS terminal or other method to process transactions, and simply retain information in Plesk Customer & Business Manager, you must be concerned about proper use of the program to maintain security and confidentiality of customer data.
As of October 1, 2008, Credit Card Processors and Bank Card Acquirers must only accept level 3 and 4 merchants that are PCI DSS compliant or that utilize PA DSS compliant applications.
Beginning October 1, 2009, all payment applications which are not PA DSS compliant will be de-certified.
Beginning July 1, 2010, Credit Card Processors and Bank Card Acquirers must ensure that merchants and agents use only PA DSS compliant applications.