In a recent interview, Bob Russo, general manager of the PCI SSC said he didn't expect any major changes to the data security standards (PCI DSS), which is undergoing a revision this year. But guidance documents are being developed to help merchants decide whether investing in encryption or PCI tokenization technologies is a wise move.
"We're creating a framework right now where we map these technologies out and lay them next to the standards, so if somebody is using one of these technologies, [the framework] will let them know if they would satisfy certain requirements," Russo said.
Some payment processors and encryption vendors have rallied around a mixture of encryption and tokenization software to protect card data at the time a customer swipes their credit card at a payment terminal. RSA, the security division of EMC Corp. is working with First Data to provide tokenization technology in the encryption services that First Data sells to merchants. Voltage Security Inc. sells an encryption combined with tokenization and is working closely with Heartland Payment Systems to provide encryption and tokenization services.
No comments:
Post a Comment