Online PIN Debit; Great Idea or Not so Great Idea?
Sunday, October 26th, 2008 Posted in PCI PIN, Vendors | 8 Comments »I (Chris) want to thank Susan Kohl for sending this over. Digital Transactions has published several articles on new technology that will allow PIN Debit for eCommerce sites. Read the article here. In short, the new technology will present a buyer ...
PIN security rises in importance
Friday, August 8th, 2008 Posted in Chip PIN, Credit Card Fraud, Merchant, PCI PIN | 1 Comment »Evan Schuman of StoreFrontBackTalk reminds us that credit card compromises that result in fraudulent ATM use can mean only one thing: they had access to the cardholder's PIN. In reference to the recent indictment he reminds us about such details. But ...
PCI Adoption in Europe and Asia Pacific
Monday, June 30th, 2008 Posted in Asia-Pacific, Banking, Europe, Merchant, PCI DSS, PCI PIN | 6 Comments »Rob Newby blogs about the statistics and studies on the adoption of PCI compliance in Europe, based on the data points from a Register article with the same focus. The article states: European merchants are behind their US counterparts in getting ...
Definaitions, Roles and Responsibilities of PCI
Sunday, June 29th, 2008 Posted in Approved Scanning Vendor, Card Brands, Merchant, PCI DSS, PCI PIN, PCI SSC, QSA, pa-dss | 1 Comment »In the payments industry there exists the PCI guidelines. When we refer to PCI we are usually talking about the PCI DSS, although as anyone will tell you there is also the PCI PED, PCI PA-DSS, and others you should ...
Council announces Pin Entry Device (PED) approval listings
Wednesday, February 13th, 2008 Posted in PCI PIN, PCI SSC | 2 Comments »On February 11th, the PCI Security Standards Council announced the availability of the Pin Entry Device (PED) approval listing. The PED Security Requirements are designed to ensure the security of personal identification number (PIN)-based transactions globally and apply to devices that ...
PCI SSC publishes PIN Entry Devices (PED) standards
Wednesday, February 6th, 2008 Posted in PCI PIN, PCI SSC | No Comments »The PCI SSC announced the release of the PIN Entry Device (PED) standards in conjunction with the latest self-assessment questionnaire (SAQ). The PCI SSC has a long list of resources that you will want to check out, but may ...
PCI SSC adopts PABP as PA-DSS
Wednesday, November 7th, 2007 Posted in Card Brands, Merchant, PCI PIN, Payment Applications, Point of Sale, pa-dss | 4 Comments »In early September the PCI SSC added the PIN Entry Device (PED) standard to its dossier of oversight items. Then at the end of September they announced the success of the first ever Community Meeting for Participating Organizations. Now in ...
PCI SSC Assumes Responsibility for PCI PED
Saturday, September 15th, 2007 Posted in PCI PIN, PCI SSC | 3 Comments »While it will come as no surprise to regular readers of this blog, the PCI Security Standards Council has officially taken control of the PCI PED standard. The important things to note are that existing certifications will be 'grandfathered' ...
PCI SSC Webinar
Tuesday, April 24th, 2007 Posted in PCI DSS, PCI PIN, PCI SSC | 1 Comment »PCI SSC have placed their most recent webinar online for all to access. Unfortunately, watching the webinar requires a viewer to be installed, which is not the way to win this security professionals heart. However, in this case, ...
Visa USA PIN security deadlines looming
Monday, March 19th, 2007 Posted in Card Brands, Merchant, PCI PIN | 1 Comment »There has been some conversation about the recent upset of Hypercom by Verifone. I won't go into details but it involves the Visa USA PIN security requirements and looming deadlines for PIN pad devices. Remember that PCI is a standard, ...