PCI PTS: The “Other” PCI Standard
Written by Walter ConwayJune 2nd, 2010
PCI Columnist Walt Conway wonders if PCI PTS might be the Rodney Dangerfield of PCI. It is a shame. Even though PCI PIN Transaction Security (PCI PTS) is primarily aimed at device manufacturers, it has implications for every retailer with PIN pads at the point of sale (POS). This standard defines the security requirements for both attended and unattended terminals.
The new PTS specs become effective in one year (May 2011). Although you can buy currently validated equipment up until that time, why would you? If you are looking at a terminal (think kiosk, gasoline pump, vending machine) that combines several individual components, you'll want to check each component (including software) against the Council's list, noting version numbers. Walt also suggests getting something in writing from the seller that indicates every component associated with the PED has been assessed by a PCI PTS lab and is compliant.
This Story Is Only Available For Premium Subscribers. Click Or Login In Below To Read The Rest Of This Story.
Already a Subscriber? Login Here
Leave a Reply
Readers, specifically those who want to comment on a story:
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
I have strong reservations about the 'individual' certification and posting of that information for merchants. Can you imagine the potential employee poaching that might occur? The implications when competitors can look up how many are certified with each of their competitors? 
-Christine
