| Are you up to date with PCI? |
Security Mandates by the PCI Security Council
- 01/1/2008 – New merchants cannot use vulnerable payment applications
- 10/1/2008 – New Level 3 and 4 merchants must be PCI DSS compliant
- 10/1/2009 – Processors must decertify all vulnerable payment applications
- 07/1/2010 – All merchants must use DSS compliant payment applications
|
The PCI Security Standards Council’s mission is to enhance payment account data security by driving education and awareness of the PCI Security Standards.
The main objective of PCI is to protect customer account data by developing protocols regarding:
- Multifaceted Security Standard
- Security Management
- Transaction Procedures
- Network Architecture
- Software Design
- Critical Protective Measures
The PCI Security Council has set various rules and put regulations into effect that must be met. Merchants and their Service Providers can have their processing capabilities revoked or find themselves out of business if they fail to comply. Member banks are stepping up their enforcement.
- Requirements must be met within certain time frames
- Fines for not complying in a timely manner
- Fines for compromised account data
- Security breaches
The PCI Security Standards Council has developed three separate standards that govern the payment card industry.
- PCI DSS - Payment Card Industry Data Security Standard
- PA DSS - Payment Application Data Security Standard
- PCI PED - Payment Card Industry PIN Entry Device
CHARGE Anywhere ensures your continued compliance with all the current PCI standards.
Eliminate the worry by utilizing a wide range of PA DSS applications paired with a PCI DSS Level 1 Payment Gateway and PCI PED devices
At CHARGE Anywhere, we're PCI Security experts
so you don’t have to be!
Security Mandates by the PCI Security Council
- 01/1/2008 – New merchants cannot use vulnerable payment applications
- 10/1/2008 – New Level 3 and 4 merchants must be PCI DSS compliant
- 10/1/2009 – Processors must decertify all vulnerable payment applications
- 07/1/2010 – All merchants must use DSS compliant payment applications
With our security solutions, CHARGE Anywhere helps the marketplace to easily achieve PCI compliance. Backed with by our PCI DSS Level 1 certified payment gateway, merchants have a variety of valuable, affordable,
and functional payment platforms available. The range of payment solutions include secure wireless
POS terminals (Spectra, VeriFone, RIM 950, and many others), software
for Windows®, payment software designed for use with QuickBooks®, and mobile
point of sale software for smartphones (BlackBerry, Windows Mobile, J2ME).
PA DSS
The requirements for the PA DSS were derived from the Payment Card Industry Data
Security Standard (PCI DSS) and the PCI DSS Security Audit Procedures. These
documents, which can be found at www.pcisecuritystandards.org, detail the requirements to become PCI DSS compliant (and therefore what a payment application must
support to facilitate a merchant's PCI DSS compliance) and should be used
as a reference for the PCI DSS and supporting documentation.
CHARGE Anywhere is dedicated to delivering the highest quality and highest
security to all of its valued customers and prides itself on having
PA DSS validated card payment applications. When
implemented in a PCI DSS-compliant environment, our secure payment applications will minimize the potential for
security breaches that lead to the compromise of magnetic stripe data, card
validation codes, PINs, and
the fraud resulting from these breaches. *
CHARGE Anywhere has 10 PCI PA DSS Validated Payment Applications:
- CHARGE Anywhere Payment Software for BlackBerry® Smartphones
- CHARGE Anywhere Payment Software for Windows Mobile® Smartphones
- CHARGE Anywhere Payment Software for Java™ ME Smartphones
- CHARGE Anywhere Payment Software for Android Smartphones
- CHARGE Anywhere Payment Software Designed for Use with QuickBooks®
- CHARGE Anywhere Payment Software for Use with Windows® OS
- CHARGE Anywhere Payment Software for Spectra Terminals
- CHARGE Anywhere Payment Software for VeriFone® Terminals
- CHARGE Anywhere Payment Software for RIM® 950 devices
PCI DSS
The PCI DSS is a multifaceted security standard that includes requirements for
security management, policies, procedures, network architecture, software design
and other critical protective measures. This comprehensive standard is intended to
help organizations proactively protect customer account data. **
CHARGE Anywhere utilizes its own PCI DSS Level 1 payment gateway (ComsGate)
for all transactions. Since it started in 2004, CHARGE Anywhere has been breach
free and operating with unparalleled up-time. The state of the art ComsGate
payment gateway is certified by VISA and meets the most stringent Level 1 security
requirements.
Securing Payment Data
- CHARGE Anywhere provides PCI PA DSS compliant software applications
- CHARGE Anywhere maintains PCI DSS Level 1 certified and audited facilities
- Only 128 bit keys are accepted
- HTTPS
- SSLv3 support
- CHARGE Anywhere supports PCI PED devices
- CHARGE Anywhere ensures security with a digital signature for every transaction under the Visa® TAP program rules
For More Information:
*
www.visa.com/cisp
**
www.pcisecuritystandards.org
