Is PCI compliance still required if a system uses tokenization?

Asked Mar 9, 2015· 1 answer
Faisal KhanAnswered Mar 9, 2015
As of date, yes, it is required. Just because a token is being generated, does not mean the transaction is 100% safe. The entire system needs to be secure to outside access, need to know access, and 100s of other variables in maintaining a secure system. The token in itself represents a small (but important) element of the overall structure of the payments ecosystem.

PCI/DSS aims to secure the payment ecosystem that one is operating.
Related in Cybersecurity, Digital Identity and Authentication