Retirement of Pre-PCI Attended POS PIN Entry Devices U.S. and Canada regions
Effective 31 December 2014, all pre-Payment Card Industry Point of Sale (PCI POS) PIN acceptance devices (devices designed and tested earlier than PCI POS PIN Entry Device (PED) Version 1.x specifications) used in an attended environment are to be replaced by devices that are PCI-approved for deployment at the time of deployment.
In 2002, Visa announced enhancements to the PIN management requirements for POS PEDs and established associated mandates for the use and retirement of PEDs. Oneenhancement, which went into effect on 1 January 2004, required that all newly deployed attended (face-to-face) POS PEDs be independently validated and approved by Visa as compliant with the PED security requirements. Additionally, Visa required that all deployed attended POS PEDs be validated by the PCI as compliant with the PED security requirements effective 1 July 2010. (Initially, these devices were approved only by Visa.)
In 2004, PCI PED Version 1.0 was launched (and later updated to Version 1.3, collectively known as Version 1.x). Devices approved under this PCI program were added to the list of PCI-approved devices, as were other devices evaluated under subsequent versions of the same security requirements. These requirements are regularly enhanced on a three-year cycle, based upon analyses of changes in the threat environment.
Note: Devices approved by Visa prior to the PCI PED coming into effect in 2004 are termed “pre-PCI devices”; in particular, PEDs are known as pre-PCI PEDs
No comments:
Post a Comment