BD308 Assignment 9-amelia nurul mupty-2581499006

1. What is the primary goal of PCI DSS?
The primary goal of PCI DSS (Payment Card Industry Data Security Standard) is to protect cardholder data from theft, fraud, and data breaches. It ensures that any business handling payment card information maintains a secure environment.

2. How does an SSL/TLS certificate help secure an e-commerce transaction?
An SSL/TLS certificate encrypts the data transmitted between the user and the website (such as credit card details and login information). This encryption prevents hackers from intercepting and reading sensitive information during online transactions.

3. How can a user verify a site has one?
A user can verify it by:

• Checking if the website URL starts with https:// (the “s” stands for secure)
• Looking for a padlock icon (🔒) in the browser’s address bar
• Clicking the padlock to view the website’s security certificate details

4. Why is it generally more secure for a small digital business to use a trusted payment gateway?
It is more secure because:

• Trusted payment gateways already comply with PCI DSS and have strong security systems
• They reduce the risk of data breaches since the business does not store card data directly
• They eliminate the complexity and cost of managing security internally
• Examples include PayPal, Stripe, and Midtrans

In conclusion, using a trusted payment gateway allows small businesses to operate securely while focusing on their core operations without handling sensitive payment data directly.

Keterangan: Telah dikerjakan sebaik mungkin.