PaymentsJournal
  • Analysts Coverage
  • Truth In Data
  • Podcasts
  • Videos
  • Industry Opinions
  • COVID-19
  • News
  • Events
No Result
View All Result
PaymentsJournal
  • Analysts Coverage
  • Truth In Data
  • Podcasts
  • Videos
  • Industry Opinions
  • COVID-19
  • News
  • Events
No Result
View All Result
PaymentsJournal
No Result
View All Result

New PCI Security Rules

Raymond Pucci by Raymond Pucci
April 26, 2016
in Analysts Coverage
0
0
SHARES
0
VIEWS
Share on FacebookShare on TwitterShare on LinkedIn

Will enhanced PCI rules be an effective security barrier for payments data? As described in the following article, new PCI requirements, to be issued on April 28, mandate an intended all-encompassing restriction on access to payments data.

When the PCI Security Council issues its new payments security requirements on Thursday (April 28), it is going to impose new rules about authentication and service providers. What is intriguing about the new edicts in 3.2 is the council’s new acknowledgment that to protect payment, protections have to happen in the larger corporate universe.

For quite some time, the rules have required multifactor authentication for people who work directly with any payments data. Bowing to real-world reality, PCI will, as of Thursday, insist on multifactor authentication for anyone whose network access privileges might possibly enable them to touch payments data, whether it’s their job or not. In other words, the universe of people who will have to abide by PCI rules just got a lot larger.

PCI Chief Technology Officer Troy Leach said that expanding the people impacted far beyond those who have payments data jobs is now necessary.

“The most important point is that the change to the requirement is intended for all administrative access into the cardholder data environment, even from within a company’s own network. This applies to any administrator, whether it be a third party or internal, that has the ability to change systems and other credentials within that network to potentially compromise the security of the environment,” Leach said. “This will not impact machine authentication where one system is communicating with another as it is intended for personnel authentication, nor will it impact administrators accessing directly from the console.”

The point? Either wall off your payment data so that no one beyond the small set of authorized persons can get access, regardless of network privilege, or force everyone to play by PCI rules. Here’s the kicker: They already should have been playing by PCI rules. As much as PCI is far from perfect, its guidelines are indeed very well-thought-out best practices for retail and, as a practical matter, just about every vertical.

As with any revised security regulation roll-out, the key will be fast and complete communication of the enhanced rules and then universal compliance. That would seem to be an ambitious goal given the amount of temporary staff and contractors that are now interwoven in the organizational structures of every company. We will see soon enough if the new PCI rules have sealed the leaks.

Overview by Raymond Pucci, Associate Director, Research Services at Mercator Advisory Group

Read the full story here

0
SHARES
0
VIEWS
Share on FacebookShare on TwitterShare on LinkedIn

    Analyst Coverage, Payments Data, and News Delivered Daily
    Sign up for the PaymentsJournal Newsletter to get exclusive insight and data from Mercator Advisory Group analysts and industry professionals.

    Must Reads

    eBay’s Upgraded Approach to Payment Processing Meets the Demands of Modern Consumers

    eBay’s Upgraded Approach to Payment Processing Meets the Demands of Modern Consumers

    January 22, 2021
    It’s Time for Retailers to Offer the Best Gift of All In-Store: Digital Gift Cards

    It’s Time for Retailers to Offer the Best Gift of All In-Store: Digital Gift Cards

    January 21, 2021
    Building C-Store Customer Loyalty Programs With Relevant Rewards

    Building C-Store Customer Loyalty Programs With Relevant Rewards

    January 20, 2021
    How PayPal Achieves High Authorization Rates

    How PayPal Achieves High Authorization Rates

    January 19, 2021
    Explaining the Bill Payment Ecosystem

    Explaining the Bill Payment Ecosystem

    January 15, 2021
    QSRs Can Address Loyalty Program Shortcomings by Serving Up Better Offers

    QSRs Can Address Loyalty Program Shortcomings by Serving Up Better Offers

    January 14, 2021
    How Merchants Can Prevent Account Takeovers—and Why Failing to Do So Amplifies Operational Expenses

    How Merchants Can Prevent Account Takeovers—and Why Failing to Do So Amplifies Operational Expenses

    January 13, 2021
    How Banks Can Leverage Tech Partnerships to Enable Innovation for Commercial Clients

    How Banks Can Leverage Tech Partnerships to Enable Innovation for Commercial Clients

    January 11, 2021

    Connect With Us

    • Advertise With Us
    • About Us
    • Terms of Use
    • Analysts Coverage
    • Truth In Data
    • Podcasts
    • Videos
    • Industry Opinions
    • COVID-19
    • News
    • Events

    © 2021 PaymentsJournal.com

    • Analysts Coverage
    • Truth In Data
    • Podcasts
    • Industry Opinions
    • Faster Payments
    • News
    • Jobs
    • Events
    No Result
    View All Result
    ×

    Login

    Forgotten Password?

    Lost your password?
    | Back to Login

      Subscribe!

      Thank you for visiting PaymentsJournal! Please subscribe to our newsletter to receive consumer data insights and daily analysis from Mercator analysts and industry experts.

      ×

      How will COVID-19 Effect the Payments Industry?

      Check out our latest:

      – Consumer Data – Complimentary Reports
      – Podcasts – Mercator Analyst Commentary
      – Industry Opinions

      ×

      WEBINAR:
      How Digital Acceleration Will Affect Payment Industry

      Please join us for this panel discussion on addressing the challenges to pave the way to payments innovation and profitability and gain insights on the key trends and challenges impacting the payments landscape in North America.

      REGISTER