Pci Card Ibm
 |
 IBM IBM Emulex 2GB FC 4 W 2765 PCI Adapter Card 80P4384  US $90.23
|
 IBM AS 400 PCI ETHERNET CARD 10 100 US $85.31
|
A Guide for Restaurant and Retail POS PCI & Credit Card Security
Restaurateurs and their customers have long been enjoying the convenience brought by credit and debit cards for many years. However, given the sky high cost and frequency of fraud on credit cards, the major card brands such as Visa, MasterCard, American Express, Discover and JCB are taking steps to safeguard their clients.
IBM created the magnetic stripe on credit cards in 1968 and became the industry standard. Given that the track data on the mag stripe is easy to read and duplicate, the card brands, with the set of standards that the Payment Card Industry Security Standards Council has built, it clearly stated the first directive: ‘Don’t store track data.’
The PCI Standards
The three-pronged approach that the PCI Security Standards Council took for protecting consumers, merchants/restaurateurs and banks:
* PCI DSS (Payment Card Industry Data Security Standard) ? involves all entities that store, process, or transmit cardholder data (Merchants, restaurateurs, service providers, processors, etc.)
Deadline for Compliance: Month of January 2007 (deadlines are long passed)
What it Means – All restaurateurs (regardless of size) must complete and submit a PCI Self-Assessment Questionnaire every year to their Acquiring Bank.
* Payment Application Data Security Standard (PA-DSS) ? embraces all applications used to store, process, or transmit cardholder data as part of authorization or settlement. (Point of Sale (POS) application developers)
Deadlines for Compliance:
Oct. 1, 2008 ? Only the software that is compliant with the new payment application security standards must be used by agents, merchants and payment processors.
Oct. 1, 2009 ? All merchants will be required to start terminating the use of any non-compliant payment applications that they might still have in their environments.
July 1, 2010 ? Mandatory use of only the payment applications that support the new standards.
It Means – After these deadlines, merchants/restaurateurs that are still running a non-PA DSS-validated application, they automatically fail the PCI assessment and possibly lose their ability to accept credit cards.
* Pin Entry Devices (PED) Standard – covers all PEDs and it aims to ensure that the cardholder’s personal identification number or PIN, including any sensitive information such as resident keys, are protected consistently at a PIN acceptance device.
Deadline for Compliance:
Jan. 1, 2004 ? For newly purchased Point of Sale (POS) PIN Entry Devices, they must pass by a recognized laboratory of Visa and be approved by Visa.
July 1, 2010 ? Mandates that every POS PEDs must pass and get approved by PCI SSC from one of its recognized laboratories.
It Means ? Merchants/restaurant owners have 2 years to replace older, un-approved PEDs.
Payment Card Industry (PCI) Do's
- Do routine vulnerability scans of your systems.
- Do security awareness training for all of your staff.
- Audit system access.
- Monitor your system activity logs.
- Separated employees must have their access privileges removed.
- Install software patches.
- Be serious when it comes to any threats, device an incident response plan.
The Don’ts of Payment Card Industry (PCI)
- You mustn't store or archive whole credit card numbers.
- Do not transmit credit card information unencrypted.
- With Payment Card Industry, it is not simply about proving you are compliant with the standards – it's all about keeping you and your customers protected.
What Restaurateurs Get From PCI
Given consumers’ expectation of ubiquitous acceptance of credit and debit cards, a restaurateur’
s validation that they are protecting their customer’s personal information is good for business:
Your Business' Reputation / Image
In a competitive business – no restaurant owner would want to be referred to as the placed where card data was stolen.
Protects Your Credit / Debit Card Payments Acceptance Ability - non-compliance of the rules and/or a breach can risk a restaurateur’s ability to accept credit/debit payments. In many cases, credit/debit payments account for 80% to 90% of transactions. Losing the ability to accept credit/debit cards = reduced traffic/customers.
Impact of State Privacy Laws
By not following the set of rules that discloses individual's credit card info with any of the 40+ States with privacy laws may have a double impact on a restaurateur. Being off-side with the Payment Card Industry may result in fines and litigation costs. Being off-side with State Privacy Laws is a felony with potentially more serious consequences.
Compliance / Security Strategy
- By making sure you are using a PA?DSS or PABP validated POS system
- Ensuring that you use approved PEDs
- Conduct regular security awareness training for your staff, especially for your supervisors
- Have background checks on any staff with administrative access to your system
- Have your staff sign a ‘Confidentiality Agreement’
- Carefully and accurately complete the PCI Self Assessment Questionnaire (SAQ) – if you are not sure – ask
- If you experience gaps in the PCI compliance, develop a realistic plan to straighten it out
- Maintain mature controls to sustain compliance
- Access controls
- Always have double factor for system and device management
- Strong passwords and secure password storage
- Monitoring to detect attack and record evidence
- Control wireless access points
- Maintain a secure configuration
- Segment networks
- Have an Incident Response Plan and test it to make sure that it's always ready when needed
- Test and audit the cardholder environment like your business depended on it
It may be a daunting task on your first try but when the above are in place, ongoing PCI compliance is not an expensive undertaking. Besides, it's a good practice for businesses to protect the sensitive information that your customers trust upon you.
About the Author
If you would like to know more about this topic or have a question in mind, you may ask for advice with our Restaurant POS professional serving your area.
The author of this article is the Vice President of Customer Relations at POS-for-Restaurants.com with over 20 years experience in the restaurant point of sale industry.
|
|
IBM PCI Riser Card PCI-E 39Y6798 $38.75 IBM PCI Riser Card PCI-E 39Y6798 |
|
|
IBM PCI-X Riser Card $132.99 1 1 Year Limited 1 x PCI-X 46M1074 IBM System: x3650 M2 IBM IBM Corporation PCI-X PCI-X Riser Card Riser Card www.ibm.com |
|
|
IBM PCI-X Switch Card 39M2699 $151.64 IBM PCI-X Switch Card 39M2699 |
|
|
IBM x346 PCI Riser Card 26K4764 $22.82 IBM x346 PCI Riser Card 26K4764 |
|
|
IBM PCI-X Riser Card 26K3052 $38.78 IBM PCI-X Riser Card 26K3052 |
|
|
IBM PCI Riser Card For x336 40K8158 $59.3 IBM PCI Riser Card For x336 40K8158 |
|
|
IBM PCI-E x3650 Riser Card 40K1907 $24.09 IBM PCI-E x3650 Riser Card 40K1907 |
|
|
IBM PCI Hot-Swap Card 73P6869 $35.36 IBM PCI Hot-Swap Card 73P6869 |
|
|
IBM PCI Express Riser Card 43W4391 $570.02 IBM PCI Express Riser Card 43W4391 |
|
|
IBM PCI-Express (1x16) Riser Card $63.99 1 1 Year Limited 1 x PCI Express x16 46M1073 IBM System x3650 M2 IBM IBM Corporation PCI Express x16 PCI-Express (1x16) Riser Card Riser Card www.ibm.com |
|
|
IBM Ethernet Card 10/100 PCI Card 9406 21H5460 $65 IBM Ethernet Card 10/100 PCI Card 9406 21H5460 |
|
|
IBM PCI Express riser-card Assembly 2x8 Slots 59Y3440 $65 IBM PCI Express riser-card Assembly 2x8 Slots 59Y3440 |
|
|
IBM PCI-X Riser Card System x3550 39Y9545 $47.9 IBM PCI-X Riser Card System x3550 39Y9545 |
|
|
IBM 2793 MT-9402 I/O WAN PCI Adapter Card 44V5119 $202.94 IBM 2793 MT-9402 I/O WAN PCI Adapter Card 44V5119 |
|
|
IBM Riser Card PCI Express x8 System x3455 40K7162 $44.48 IBM Riser Card PCI Express x8 System x3455 40K7162 |
|
|
IBM ServeRAID 6I+ PCI Ultra 320 SCSI Card 13N2195 $21.69 IBM ServeRAID 6I+ PCI Ultra 320 SCSI Card 13N2195 |
|
|
IBM Remote Supervisor Adapter II Adapter (Card Only) PCI 59P2993 $112.74 IBM Remote Supervisor Adapter II Adapter (Card Only) PCI 59P2993 |
|
|
IBM 06P2215 SCSI Controller - Ultra160 SCSI - PCI - Plug-in Card $27.49 IBM 06P2215 SCSI Controller - Ultra160 SCSI - PCI - Plug-in Card |
|
|
IBM PCI Hot Plug Switch Card Assembly (All Models) 43W4684 $153.92 IBM PCI Hot Plug Switch Card Assembly (All Models) 43W4684 |
|
|
IBM PCI Express Gen2 Riser Card x8 Two-Slot 69Y2328 $80.96 IBM PCI Express Gen2 Riser Card x8 Two-Slot 69Y2328 |
|
|
IBM System x3455 PCI Express x16 Riser Card 40K7160 $35.36 IBM System x3455 PCI Express x16 Riser Card 40K7160 |
|
|
IBM PCI-E 2x8 Riser Card For System X3650 M2 46M1072 $54.74 IBM PCI-E 2x8 Riser Card For System X3650 M2 46M1072 |
|
|
IBM PCI Express Riser Card x16 Assembly (High Profile) 43V7066B1 $34.22 IBM PCI Express Riser Card x16 Assembly (High Profile) 43V7066B1 |
|
|
IBM PCI Express riser-card Assembly 2x 8 Slots 43V7063 $84.38 IBM PCI Express riser-card Assembly 2x 8 Slots 43V7063 |
|
|
IBM PCI Switch Card Assembly For XSeries 365 73P6869 $49.04 IBM PCI Switch Card Assembly For XSeries 365 73P6869 |
|
|
IBM ServeRAID 6I+ PCI Ultra 320 SCSI CARD/NEW Bulk $310.54 IBM ServeRAID 6I+ PCI Ultra 320 SCSI CARD/NEW Bulk |
|
|
IBM PCI Riser Card For XSeries 305 With Bracket 49P2745 $5.22 IBM PCI Riser Card For XSeries 305 With Bracket 49P2745 |
|
|
IBM (Card Only) Remote Supervisor Adapter II PCI EN 59P2992 $112.74 IBM (Card Only) Remote Supervisor Adapter II PCI EN 59P2992 |
|
|
IBM Remote Supervisor Adapter II Adapter PCI Card Only 59P2990 $131.74 IBM Remote Supervisor Adapter II Adapter PCI Card Only 59P2990 |
|
|
IBM PCI 16/4 Token Ring Network Card 03N3308 01L1968 $10.34 IBM PCI 16/4 Token Ring Network Card 03N3308 01L1968 |
|
|
IBM Myrinet 333MHz Single Fibre/PCI-X Card With 2MB 26K7752 $31.4 IBM Myrinet 333MHz Single Fibre/PCI-X Card With 2MB 26K7752 |
|
|
IBM QLogic Iscsi Expansion Card Network Adapter PCI-X 32R1926 $191.69 IBM QLogic Iscsi Expansion Card Network Adapter PCI-X 32R1926 |
|
|
FRU - Mini PCI Communication Card - IBM 11a/b/g Wireless LAN Mini PCI Adapter 91P7301 $17.34 FRU - Mini PCI Communication Card - IBM 11a/b/g Wireless LAN Mini PCI Adapter 91P7301 |
|
|
IBM 2/4-Ports Ethernet Expansion Card (Cffh) For IBM BladeCenter Network Adapter PCI Express x4 GigaBit EN 44W4479 $233.72 IBM 2/4-Ports Ethernet Expansion Card (Cffh) For IBM BladeCenter Network Adapter PCI Express x4 GigaBit EN 44W4479 |