The Payment Card Industry Security Standards Council has set Aug. 29 as its deadline for gathering suggestions from participating organizations for security compliance topics that need further study.
Some 700 participating organizations, generally merchants, associations or banks, may submit ideas enabling the council’s Special Interest Groups to address security topics in more depth, according to an Aug. 1 press release.
“The feedback the council gets is valuable for watching for trends, or something that needs clarification,” Bob Russo, council general manager, tells PaymentsSource. “In some cases, people don’t understand a new technology, and they need clarification or training with a standard already established.”
Topics that could result in further study include various aspects of mobile computing; the increase in criminals “skimming” credit card data at ATMs, gas pumps or anywhere payments are made at unattended terminals. Topics may also pertain to a certain industry, such as convenience stores, if a trend is unfolding regarding payments security, Russo explains.
As new technologies emerge, Russo says many participants have questions about “scoping,” which refers to the process of determining which part of a merchant’s payments system is used to store credit or debit card data and whether it is compliant with the PCI Data Security Standard.
The council addressed one such security concern earlier this year in relation to credit card data telephone call centers receive. (
Following the deadline for topic-submissions, the council will conduct two meetings, one in the United States in September and the other in Europe in October. The council expects up to 2,000 representatives of participating organizations and qualified security assessors to attend and listen to “pitches” for which topics will get Special Interest Group review, Russo says.
What do you think about this? Send us your feedback.
