The massive data breach at The TJX Companies, a U.S. off-price apparel and home fashions retailer, made public earlier this year -- and a string of similar smaller breaches at various other firms since then -- appears to be goading merchants to accelerate their adoption of the Payment Card Industry (PCI) data security standard.
As of this month, about 96 percent of the world's largest businesses that accept credit and debit cards for payment have confirmed that they are no longer storing magnetic stripe information on their systems, according to Visa U.S.A.
Magnetic stripe data, also known as "track data" in industry parlance, includes the security verification codes on the back of each payment card as well as personal identification number (PIN) data from merchant payment systems. Older retail payment systems often captured and stored this data by default, without the merchants even being aware of that the information was being retained.
Industry analysts believe the storage of such data has made retail systems an attractive target for hackers. The practice is explicitly banned under PCI, which is a data security standard mandated by Visa, MasterCard Worldwide, American Express, Discover Financial Services and JCB International Credit Card Co.
Purging track data marks an important step towards full compliance with PCI, said Michael Smith, senior vice president of enterprise risk and compliance at Visa.
"By removing prohibited data from their payment systems, large and small businesses alike are denying hackers the data they covet for use in counterfeiting payment cards and are thus making their businesses and the payments system more secure," Smith said in a statement.
The progress on the track data front comes amid an overall uptick in the adoption of the controls mandated by PCI. According to Visa, so far, about 40 percent of 327 Level 1 merchants -- those processing more than 6 million transactions per year -- have validated their compliance with the standard. Another 50 percent have been audited for compliance with the standard and are working to address issues that were identified in those audits. The remaining 10 percent is still working on their initial compliance assessments.
In December 2006, about 36 percent out of the 230 merchants then considered to be at Level 1 had validated compliance. Since then, 97 more merchants have been added to that category.
The validated compliance level among Level 2 merchants -- those processing between 1 million and 6 million cards each year -- was 33 percent, while another 42 percent have submitted their initial validation requirements, Visa said. The remaining 25 percent are beginning the validation process. Last December, the number of compliant Level 2 merchants stood at 15 percent.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Strategies for Eliminating .PST Files
How to improve employee productivity in small and medium businesses
Gaining Competitive Advantage Through Enterprise Planning
Controlling storage costs with Oracle database 11g
IT Service Management Needs and Adoption Trends: An Analysis of a Global Survey of IT Executives
Email Archiving 101—Customer Case Study
The state of Middleware
Delivering the Power of Choice with Microsoft Dynamics CRM
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
AOC Launches 18.5” Widescreen Green 16:9 LCD Monitor in Australia and New Zealand 2008-12-03 15:30:00+11
FrontRange Solutions eases software license management with new License Manager 3.0 2008-12-03 14:56:00+11
Progress Software's Cure for Managing Services-based Applications 2008-12-03 14:42:00+11
S3 Graphics Unleashes Full OpenGL® 3.0 API Support with Beta Driver for Chrome 500 Series GPUs 2008-12-03 14:08:00+11
Informatica Powercenter added to Nec Infoframe Solution Suite 2008-12-03 11:36:00+11
Everything you need to know about email and web security (but were afraid to ask)
What you don’t know can destroy your business. It’s hard to imagine modern business without the internet but in the last few years it has become fraught with danger. Read on to discover how internet security can give your business a competitive advantage.












