Payment Methods Newsletter November 2018

The PCI SSC has created a working group of Global Executive Assessors and Internet Security Auditors is one of its 20 members

As we saw a few weeks ago on our blog, the PCI SSC has created the "Global Executive Assessor Roundtable" and has entrusted Internet Security Auditors, which will be represented by its partner, Miguel Ángel Domínguez, to be part of this group for 2 years.

The goal of this group is for the PCI SSC to receive recommendations and feedback from these assessors and will allow to establish a communication channel between the main leaders of payment services.

On the PCI SSC website we can see the organizations in the working group.

PCI DSS Tips, basic PCI SSC tips for small merchants

The Council has developed a program to help small merchants comply with the PCI DSS standard; this program is called "Payment data security essentials" (this program includes the Data Security Evaluation Tool).

We can review it in the article: PCI DSS Compliance, basic PCI SSC tips for small merchants.

PCI Security Standards Council updates the PIN Security standard

The PCI PIN Security Requirements standard is the standard that covers the security needs in any transaction that includes the PIN. The requirements have been reorganized and a series of deadlines have been established for the use of fixed 3DES keys for PIN encryption. David Acosta explains it on our blog. In addition, the Council is developing a new program for PIN assessors (PIN Assessor Program) that will start in 2019.

The details of the news on the PCI SSC website.

Brief introduction to the PCI 3D-Secure standard (PCI 3DS)

After the publication of the new standard in October 2017, we see a brief introduction to its scope and requirements.

This standard applies to online transactions that use the 3D-Secure protocol, increasing protection against fraud since the merchant will not have access to the information of said transaction.

New PCI SSC tool for small merchant assessment

The PCI SSC has developed, within its "PCI Data Security Essentials Resources for Small Merchants" program, a tool that will help small merchants identify their payment channels and the main risks and controls that affect them.

The tool, Data Security Evaluation Tool, is presented to be used by merchants so they can assess their environment, through questionnaires and in simple language, trying to move away from technical terms.

Before completing the questionnaire, it is indicated that merchants must do it with the help of their acquirer and that the tool is not used to communicate the compliance status to the Council or the bank.

Detailed analysis in the PCI Hispano blog.

Concern over Visa and Mastercard's "Buy Button"

Visa and Mastercard announced last April that they were considering merging their payment solutions (Visa Checkout and Masterpass, respectively) to adopt a new "Buy Button" for making "one-click" purchases and to align with the "EMVCo's Secure Remote Commerce" framework.

Their idea is to compete with PayPal, Apple Pay, and similar solutions, which dominate a large part of the market.

However, this idea has generated a lot of buzz, and several organizations (Walmart, Target, Home Depot, etc.) oppose it and are seeking regulatory support, as this solution would prevent companies from redirecting debit transactions through other networks with lower overhead costs.

QR Code Payment

Payment via QR codes is probably the payment method that has seen the most growth in the last year, mainly in China and India, where players such as Alipay and WeChat Pay can be seen in almost every store, which often do not accept card payments instead.

This technology is already implemented in some countries, such as those mentioned, but is still in the growth phase in the United States and Europe, where several solutions allowing the use of this technology are already being seen.

Payments in the Internet of Things

IoT, wearables... It is estimated (Gartner) that by 2020 there will be more than 20 billion IoT devices connected to the network, including cars, watches, refrigerators, etc.

Many of these devices will be able to make purchases online.

To this end, Visa has developed its "Visa Ready" program, which seeks to certify and secure the payment experience through these devices.

The program can be viewed on the Visa website.

This message has been sent pursuant to your authorization for the communication of commercial information from Internet Security Auditors. You can view our Data Privacy Policy here. You have the option to exercise the rights of access, rectification, erasure, restriction, objection, and portability provided for in the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC" by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2 08030. Barcelona (Spain), or by email to the following address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address where you received our communication: marketing@isecauditors.com

This email is sent according to your previous authorization for sending commercial information from Internet Security Auditors. You can read our Data Privacy Policy here. You have the possibility at all times to exercise the rights of access, rectification, erasure, restriction of processing, objection, and portability according to the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2. 08030 Barcelona (Spain), or through the following email: legal@isecauditors.com. If you only wish to request your cancellation of these communications, click on the following link and send that email from the email address where you received our communication: marketing@isecauditors.com