Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
The PCI Standards Council has published the latest version of its PIN Transaction Security (PTS) Point of Interaction (POI) security requirements.With version 2.0 now out of date, the council claimed that version 3.0 is designed to streamline and simplify testing and implementation, by providing a single set of modular evaluation requirements for all Personal Identification Number (PIN) acceptance POI terminals.It has moved to simplify the testing process and eliminate overlap of documentation by providing one modular security evaluation program for all terminals and a single reference listing of approved products. This removes the three separate sets of requirements for Point of Sale PIN Entry Devices (PED), Encrypting PIN Pads (EPP) and Unattended Payment Terminals (UPT). In addition to strengthening and restructuring existing requirements, the latest version also introduces three new modules for evaluation requirements. The first, entitled Open Protocols, applies to Internet Protocol (IP) or to wireless enabled devices. The Secure Reading and Exchange of Data (SRED) module facilitates testing of the secure reading and encryption of cardholder data at the point of entry, and the third module Integration, is designed to address the integration of components in an unattended POS PIN acceptance device. Bob Russo, general manager of the council, said: “By combining all of the requirements into one program, we have simplified one-stop shopping when it comes to secure devices. This new approach and additional modules make it easier for manufacturers and merchants to make sure that at any point in a transaction, account data is being protected.”Speaking to Dark Reading, Russo claimed that the introduction was particularly timely as point-of-sale [devices] are the hot spot these days.He said: “There are breaches out there all the time, such as people boldly walking into stores and adding skimming devices to card readers in the checkout without being noticed. The goal is to simplify the security requirements process for payment equipment vendors and to provide merchants a simpler way to see a listing of PCI-compliant devices.”See original article on scmagazineus.com
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.