IMGCAP(1)]
The National Retail Federation yesterday released 25 best practices intended to help retailers reach cost-effective compliance with the Payment Card Industry data-security standards. The Washington, D.C.-based federation developed the best practices with PCI Knowledge Base, an independent research firm focused on payment-data security. The best practices "provide a road map that will assist retailers to more cost-effectively achieve and maintain PCI compliance," says Dave Hogan, federation chief information officer. "As the requirements for PCI change, so, too, will the best practices." Examples of the best practices include recommendations and training for retailers to conduct their own self-assessments and implement service-provider security evaluations. The federation based the best practices on information collected from more than 300 hours of anonymous interviews with retail industry observers. Representatives from BJ's Wholesale Club, Yum! Brands, Saks, Burlington Coat Factory and others contributed information, according to the federation.
