Achieving PCI DSS Compliance

Type: White Paper

With card fraud and identity theft continuing to increase globally, the Payment Card Industry (PCI) has introduced a new world-wide Data Security Standard (DSS) to protect sensitive cardholder data from the risk of compromise.

PCI DSS demands that any financial institution, retailer or service provider that processes, stores or transmits credit or debit card data must be able to demonstrate PCI DSS compliance to a PCI DSS Qualified Security Assessor. Non-compliance means the risk of losing the ability to process payments.

There are also two other key standards that apply to payment device manufacturers and payment application providers: requirements for Payment Card Industry PIN Transaction Security (PTS) and a Payment Application Data Security Standard (PA-DSS). Though device manufacturers and application providers are not themselves required to comply with the PTS security requirements or PA-DSS, it makes PCI DSS compliance far more efficient if an organization chooses to work with partners such as NCR who has PCI approved solutions.

Overall PCI DSS requirements include security management, policies and procedures, network architecture and software design.

Meeting this PCI DSS standard significantly improves an organization’s approach to information security in general—not just card data—so there is more to this than just passing an audit. Any investment in achieving compliance not only reaps rewards in terms of improved security but is always dwarfed by the costs of not complying, particularly when it comes to a fraudulent incident damaging brand reputation.

Fraud never stands still and is continually migrating to the path of least resistance. That is why NCR is totally committed to a best practice approach to ATM network security and standards compliance. NCR’s total security approach also includes a PCI PTS approved EPP (Encrypting PIN Pad) and a centralized approach to software security, control and compliance through Solidcore Suite for APTRA™. NCR is the industry’s first ATM vendor to have PA-DSS validated APTRA software.

NCR not only helps you reduce the risks of fraud and non-compliance but also eases your audit and PCI DSS compliance burden.