Implications of Heartland’s Beyond PCI Strategy for Retailers
Written by David TaylorMay 13th, 2009
Retailers need to carefully examine any new "beyond PCI" technical approaches being offered by their processors, as well as other service providers. They need to think about what will be required of them to take advantage of such "end-to-end" security and whether the investment in technology and labor will be transferrable, should they decide to switch to a competitor.
Beyond focusing on avoiding "Beyond PCI Lock-in," pens GuestView PCI Columnist David Taylor, retailers also need to focus on ensuring that these new security efforts don't break their existing applications. Some of the tokenization and end-to-end encryption approaches currently (or soon to be) on the market don't always play nice with existing ERP, CRM and other enterprise applications.
This Story Is Only Available For Premium Subscribers. Click Or Login In Below To Read The Rest Of This Story.
Already a Subscriber? Login Here
Pages: 1 2
3 Comments | Read Implications of Heartland’s Beyond PCI Strategy for Retailers
Leave a Reply
Readers, specifically those who want to comment on a story:
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
-Ed
May 13th, 2009 at 7:31 pm
The biggest result will be the increase in the standard of care. The more companies that do PCI-plus the higher the standard of care is from a legal perspective (that is when it becomes “industry standard” and even if not, plaintiffs will argue it is).
May 14th, 2009 at 11:03 am
Since big processors and other enterprises with lots of sensitive data can’t afford to wait around for standards and/or interoperability, one ought to be in search of what the analysts characterize as automated, enterprise-wide encryption management solutions. They’re already out there folks.
May 14th, 2009 at 11:11 am
No one’s arguing the merits of encryption, but as the scale of cert and key objects increases, we’ve got to have a better way to manage all this–some way other than a spreadsheet and really smart engineer.
Suggestions?