No thanks, stay here.  

  We notice you are visiting from a U.S. Internet provider. Switch to our U.S. website.

Industry News

Restricting access is most important aspect of payment processing security - and least practiced

By Kristen Lawrence

01/03/2010 - Restricting access to payment processing data is considered the most important aspect of PCI DSS compliance - yet it is also the aspect merchants struggle with most.

These are the results of a study released Monday by the Ponemon Institute, on behalf of IT security firms Thales.

In a survey of Qualified Security Assessors, the Ponemon Institute found that Requirement 7 - which requires that merchants restrict access to cardholder data to individuals on a "business-driven need-to-know basis" - was the requirement respondents felt was most important to achieving PCI compliance, yet QSAs also noted that it is the most difficult requirement for merchants to meet.

Other survey questions reinforced the common conception that merchants are focusing more on PCI compliance - and therefore on avoiding fines - than on true payment processing security.

"This study indicates a significant concern among QSAs that many merchants are primarily focused on complying with PCI and less on what should be equally important - protecting sensitive information," said the report.

Many industry experts, including PCI Security Standards Council general manager Bob Russo, emphasize the importance of taking a long-term view of payment processing security, as a short-term, compliance-focused view can actually present significant security - and consequently financial - risks. ADNFCR-2514-ID-19644259-ADNFCR

Related News - Security and Fraud

Study: PCI compliance a no-brainer among Level Four merchants

10/01/2012

A recent survey by research firm Gartner found nearly one-fifth of retailers and credit card processing services are not compliant with Payment Card Industry Data Security Standards.

Full Article

Tracking spending can be made easy with credit cards

06/12/2011

Many people feel that plastic payment processing options can lead to overspending, but a recent article published by Forbes explains that making payments with credit cards is actually a great way to control costs and track expenses.

Full Article

Keeping business bank accounts safe and secure

11/10/2011

The internet has provided consumers with many new and convenient ways to access their account information, but these advances have also created the need for thorough security measures.

Full Article

Personalized payment chips get fraud prevention upgrade

10/10/2011

Payment chips made by Fiserv will now be further personalized using the Europay MasterCard Visa (EMV) standards, a global credit card payments technology that helps prevent fraud from lost, stolen or counterfeit cards.

Full Article