Thursday, August 24, 2006
Visa Will Require Some Merchants to Adhere to Stricter Security Rules
Visa Will Require Some Merchants to Adhere to Stricter Security Rules
(26 July 2006)
Visa USA has reclassified roughly 1,000 merchants under the Payment Card Industry (PCI) standards program, making them subject to more stringent security requirements. Merchants who processed fewer than 6 million card transactions annually were previously designated Level 4, but have been moved to Level 2, meaning they are "required to submit quarterly network-vulnerability scans" and complete a self-assessment questionnaire. Level 4 merchants were not required to comply, though VISA USA has suggested they do. The affected merchants must be in compliance with the security measures by September 30, 2007. In addition, approximately 1,000 merchants who process fewer than 1 million card transactions annually will be moved from level 3 to level 4, diminishing their security requirements.
http://www.computerworld.com/action/article.do?command=viewArticleBasic&arti
cleId=9002011
[Editor's Note (Schultz): The fact that VISA USA is requiring merchants to conform to more rigorous security standards is a very positive development in the fight against identity theft and other types of fraud. However, the fact that VISA USA has relaxed security requirements for other merchants without offering any explanation is troubling.]
(26 July 2006)
Visa USA has reclassified roughly 1,000 merchants under the Payment Card Industry (PCI) standards program, making them subject to more stringent security requirements. Merchants who processed fewer than 6 million card transactions annually were previously designated Level 4, but have been moved to Level 2, meaning they are "required to submit quarterly network-vulnerability scans" and complete a self-assessment questionnaire. Level 4 merchants were not required to comply, though VISA USA has suggested they do. The affected merchants must be in compliance with the security measures by September 30, 2007. In addition, approximately 1,000 merchants who process fewer than 1 million card transactions annually will be moved from level 3 to level 4, diminishing their security requirements.
http://www.computerworld.com/action/article.do?command=viewArticleBasic&arti
cleId=9002011
[Editor's Note (Schultz): The fact that VISA USA is requiring merchants to conform to more rigorous security standards is a very positive development in the fight against identity theft and other types of fraud. However, the fact that VISA USA has relaxed security requirements for other merchants without offering any explanation is troubling.]