BD308 – Cyber Security – Fariid Alam Saputra – 2581485755

1. What is the primary goal of PCI DSS?
2. How does an SSL/TLS certificate help secure an e-commerce transaction? How can a user verify a site has one?
3. Why is it generally more secure for a small digital business to use a trusted payment gateway instead of processing and storing credit card details itself?

Status: 100% sudah tercapai

Keterangan: Saya sudah mengerjakan essay ini dengan baik dan benar

Bukti:

1. he primary goal of PCI DSS (Payment Card Industry Data Security Standard) is to protect cardholder data and ensure secure handling of payment information. It was created to reduce fraud, data breaches, and misuse of credit or debit card information by setting strict security requirements for organizations that store, process, or transmit payment data.

2. An SSL/TLS certificate helps secure an e-commerce transaction by encrypting the data exchanged between the user’s browser and the website. This means that sensitive information—such as credit card numbers, passwords, and personal details—cannot be easily intercepted or read by attackers أثناء transmission. It also provides authentication, ensuring that the website you are connecting to is legitimate and not a fake site pretending to be a trusted store.

   Users can verify if a site has an SSL/TLS certificate in a few simple ways. First, check if the website URL starts with “https://” instead of “http://”. Second, look for a padlock icon in the browser’s address bar. By clicking on the padlock, users can view certificate details, such as who issued it and whether it is valid. These signs indicate that the connection is secure and encrypted.

3. It is generally more secure for a small digital business to use a trusted payment gateway because these providers are specialized in handling sensitive financial data and already have strong security systems in place. They use advanced protections like encryption, tokenization, fraud detection, and strict compliance with standards such as PCI DSS. For a small business, building and maintaining this level of security on their own is very complex, expensive, and risky.

   By using a payment gateway, the business does not need to store or directly process credit card details, which greatly reduces its exposure to data breaches. This also lowers legal and compliance responsibilities. In addition, customers tend to trust well-known payment providers, which increases confidence during transactions. In short, using a trusted gateway helps businesses stay safer, simpler, and more reliable.