The National Association of Federal Credit Unions (NAFCU) says the transition to EMV cards is an important step in the process of data security, but it is not a silver bullet. Last week the FBI also reinforced EMV will help reduce counterfeit cards but until PINs are used at the POS fraud will continue.
The number and sophistication of cyber threats will continue to increase exponentially. Fueled by both geopolitics and economic incentives, international (and often state-sponsored) criminal organizations will escalate their development of offensive cyber capabilities.
Payment Card Industry (PCI) Payment Application and Qualified Security Assessor (PA-QSA) specialist Coalfire Systems and InstaMed, a Healthcare Payments Network, have issued a white paper on payment card security for the healthcare industry.
PaymentVision PCI-compliant electronic payment gateway services will host a free Data Security Essentials webinar designed to help managers of compliance, accounts receivables, and operations professionals learn about payment card and data security. The event will share information and tools to help business owners and compliance managers understand payment card and data security, the benefits of PCI DSS v3.0, managing the PCI DSS scope, and the new PCI DSS v3.0 requirements.
ControlScan CEO Joan E. Herbig has been elected to the 2013 board of directors for the Women’s Network in Electronic Transactions (W.net) electronic transaction association. Herbig is one of three new directors who have joined the organization to help further its mission to provide a forum that inspires and empowers women in the electronic transactions industry through networking opportunities, mentoring programs and more. Herbig became CEO of Atlanta-based ControlScan in 2007, where she successfully transitioned the company into its present role as an expert provider of PCI and data security solutions for small to mid-sized merchants and the acquirers serving them. Herbig brings with her three years’ experience as CEO of Cambia Security after having served as CEO of mobile device systems management firm XcelleNet.
Coalfire Systems PCI Payment Application and Qualified Security Assessor (PA-QSA) company announced healthcare providers will reduce the scope of PCI compliance requirements with InstaMed, the leading Healthcare Payments Network. InstaMed’s Payment Card Encryption, integrated with MagTek®’s MagneSafe Security Architecture and secure payment card devices, enables providers to significantly reduce and nearly eliminate their risk of a data breach.
XYPRO Technology Corporation HP NonStop server security, audit, compliance, and FIPS-validated encryption solutions is set to resell the Voltage SecureData solution suite, to complement its existing NonStop security products. Voltage SecureData is a comprehensive data-centric security solution, uniting end-to-end encryption, tokenization and data masking for the protection — end-to-end – of sensitive information, including data subject to compliance, such as PCI DSS, and without impacting business process, work flow and applications. Leveraging patented technology and solution innovations, including Voltage Identity-Based Encryption™ (Voltage IBE™) and Voltage Format-Preserving Encryption™ (Voltage FPE™), Voltage SecureData is the most comprehensive data protection platform, securing data as it is captured, processed and stored across the variety of devices, operating systems, databases and applications. It is used by corporate enterprises, financial institutions, healthcare organizations, government agencies, utilities, retailers and service providers.
Varolii Corporation achieved its annual recertification of Level 1 PCI DSS compliance With this annual recertification, Varolii maintains its standing as the first and only U.S. company in Software-as-a-Service customer interaction management industry to meet PCI DSS, ISO 27001 certification, Health Insurance Portability and Accountability Act (HIPAA) and Gramm-Leach-Bliley Act (GLBA) compliance. Fortune 1000 companies, including two of the three largest U.S. banks, three of the five largest health management companies, five of the top 10 airlines and 30 of the largest U.S. utilities, rely on Varolii to generate nearly one billion interactive, secure communications each year. Of these, more than half include sensitive healthcare or financial data. In fact, on a typical day Varolii communicates with consumers regarding payments totaling more than $12 billion in accounts receivable.
DANTOM Systems is pleased to announce the achievement of its annual recertification of PCI DSS Level 1, version 2.0 compliance. PCI DSS Level 1 certification is required for organizations processing over six million payment transactions annually. In addition to achieving PCI DSS Level 1, DANTOM also was recertified as complying with the following laws, regulations…
SoundBite Communications achieved its annual re-certification as a Level 1 Service Provider compliant with the PCI-DSS. SoundBite’s Level 1 PCI re-certification underscores the company’s commitment to information security and solidifies its reputation as an industry leader. This is the fourth consecutive year that SoundBite has achieved Level 1 certification for all sites. Earlier this year SoundBite had expanded its certification to include its London-area datacenter and UK-based operations.
Virtual Piggy has received Level 1 PCI DSS certification to provide an ecommerce system that allows merchants to interact and transact with the youth market. To achieve PCI certification, Virtual Piggy underwent a comprehensive third party assessment of its policies, procedures and technical systems by Coalfire Systems, a Qualified Security Assessor (QSA) company, as certified by the Payment Card Industry Security Standards Council.
Varolii Corporation personalized SMS, voice and email customer communications achieved ISO 27001 certification, the internationally recognized Information Security Management System (ISMS) standard. Varolii now meet ISO 27001 certification, Payment Card Industry Data Security Specification (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA) and Gramm-Leach-Bliley Act (GLBA) compliance. ISO 27001 (ISO/IEC 27001) is the most rigorous global security standard that sets out requirements for an Information Security Management System. Varolii ensures client data protection while securely delivering more than five billion intelligent, personalized communications to consumers and employees on behalf of Fortune 1000 companies.