• Skip Navigation |
  • Accessibility 
IT-Director.com Logo
  • Singularity go SaaS with LiveAgility
  • User Experience Monitoring as Governance?
  • Running IT as a business: don't be daft
 

Main navigation - go to a section of this website:

  • ARCHIVE
  • PAPERS
  • EVENTS
  • NEWSWIRE
  • BLOGS

  

Member Login | Become a Member

 
DOMAINS
  • Enterprise
  • SME
  • Business Issues
  • Technology
    • Data Management
    • Applications
    • Infrastructure
    • Systems Mgmt
    • Security
    • Mobile
    • Storage
    • Personal Productivity
  • Services
  • Channels
FEATURED EVENTS
  • Legal IT Show 2010
    10th February - 11th February
    London, United Kingdom
  • Data Modelling Fundamentals
    15th February - 16th February
    London, United Kingdom
POPULAR PAPERS
  • The IBM Workload Optimized Approach by Sageza Group, Inc.
  • Integrated Systems Management by Sageza Group, Inc.
  • Avoiding the Integration Tar Pit by Bloor Research
TRANSLATE PAGE



USEFUL LINKS
  • Last 7 Days
  • Archives
  • Market Place
  • Top Articles
INTERACT
  • Advertising
  • Site Feedback
  • Newsletters
  • Contact Us
  • Registration
CONTENT FEED

Technology
RSS Feed:

RSS Icon

What is RSS?

RANDOM QUOTE
Say Again? - "Then the Spanish Gorillas came down from the hills and nipped at Napoleon's flanks." - From Student Bloopers

ADVERTISEMENT
News Release

Hypercom, Ingenico and VeriFone, Launch New Payment Security Alliance To Clarify and Supplement

Released: 5th May 2009
Publisher: spva

London - Three payment industry participants - Hypercom (NYSE: HYC), Ingenico, S.A. (EURONEXT: ING) and VeriFone (NYSE: PAY) today announce the formation of the Secure POS Vendor Alliance (SPVA: /my-ita/cms/www.spva.org), a non-profit business organisation chartered with implementing common payment security standards among vendors of secure point-of-sale (POS) devices used by retailers, acquirers and cardholders alike.

The SPVA will increase awareness of security issues, encourage adoption of best practices and ease consistency among standards that govern disparate components and participants in the payment environment. The SPVA founders recognise that stakeholders' consistent adherence to security standards and rules are a vital necessity in the continued growth of the electronic payments industry.

The SPVA will encompass the companies that provide the key security elements among consumers, merchants and transaction acquirers and issuers. Members of the SPVA deliver a unique global experience with security standards, ensure best practice implementation and continue to evolve the security enhancements and interoperability required to reduce fraud and lower risk for all participants in card payment transactions.

Membership is open to all payment industry stakeholders. The SPVA encourages general membership among all vendors that develop secure POS payment systems, and associate membership among organisations who sell or utilise products or solutions that interact with secure POS payment devices: retailers, acquirers, software vendors, ECR vendors, banks and other standard setting associations.

VeriFone, Ingenico and Hypercom, as founding members of the new alliance, will serve on the SPVA managing committee, along with two other directors to be elected by the membership in the coming months. The founding members have appointed the following individuals to serve a one year term as executive managers of the alliance:

  • Christophe Dolique - will serve as SPVA Chairman and is EVP, Global Marketing & Transaction Services at Ingenico
  • TK Cheung - will serve as SPVA Vice Chairman and Chief Technology Officer and is the VP, Global Quality and Security at Hypercom
  • Paul Rasori - will serve as SPVA Secretary/Treasurer, is the SVP, Global Marketing at VeriFone

A primary objective of the SPVA will be to bring together industry experts to participate in "Technical Working Groups". Through their participation, SPVA members can contribute to enrich and develop future security guidelines and acquire first-hand knowledge of current security threats.

Initially, the SPVA will create Technical Working Groups that will focus on critical security topics, such as:

  • Standardised Implementation of Existing Security Standards - with the goal to release a common interpretation of existing security standards. This includes fostering widespread compliance to those promulgated by the Payment Card Industry (PCI) Security Standards Council, EMVco and European Payments Council (EPC).
  • Security of the Payment Device Lifecycle - aimed at developing end-to-end lifecycle management protocols to ensure digitally signed applications, track and manage devices in the field, and suggest security standards and audit procedures over development, manufacturing, supply chain, deployment and repair.
  • End-to-End Encryption - to create recommended implementation guidelines for the encryption of cardholder data utilizing hardware level security
  • Security Threat Analysis and Intelligence - to provide education and resources to educate members of current threats and ways to mitigate them.

Once these types of guidelines and standards are fully developed, the SPVA will establish an "SPVA approval" program targeted at Secure POS system vendors wishing to display the SPVA Logo on their solutions. Merchants, Acquirers and Processors choosing SPVA-approved solutions can then be assured of the highest level of security currently available.

"Hypercom, Ingenico and VeriFone hope to act as a catalyst and kick off a common initiative by establishing a forum for industry-wide cooperation. By combining their expertise in the payment systems arena, the three companies are committed to succeed in accelerating widespread adoption of enhanced security guidelines, " Christophe Dolique, SPVA Chairman, says. Security is the cornerstone of the electronic payment industry and its continuous enhancement among the payment value chain is mandatory to protect all stakeholders' interests. In the meantime, security must also be synonymous with convenience, cost control and the ability to be easily deployed and maintained. To address this dual challenge, the industry requires a common view through which experiences can be shared and best practices developed. This is the goal of the SPVA."

The chief executives of the three companies issued the following statements:

"Security is paramount. Hypercom is aggressively focused on providing standards-based security solutions that give customers and consumers confidence that their payment transactions are protected against criminal and negligent acts. Today's standards have served the industry well, but as criminal attacks become more sophisticated, this industry's security implementations must evolve to cover the complete secure POS lifecycle. The SPVA will advance security implementations based on the unique perspective and experience of payment vendors around the world," said Philippe Tartavull, CEO and President, Hypercom.

"Ingenico is strongly committed to further promoting security compliance globally. The formation of an alliance of secure POS payment system vendors will dramatically enhance our customers' ability to fight fraud, while making security more convenient to deploy and to maintain for all stakeholders of the payment ecosystem," said Philippe Lazare, CEO, Ingenico.

"Secure POS devices represent the entry point for all transactions in retail environments. In this age where criminals are able to pinpoint any weaknesses in the end-to-end system, the obvious place security strategy must begin is as at the point of sale. The SVPA will build on the unique experience of its members and their ‘entry point' position to advance more secure solutions that lower risk for consumers, merchants and acquirers," said Doug Bergeron, CEO, VeriFone.

To see a Webcast of the announcement, please visit /my-ita/cms/www.spva.org


Related Links:

  • Other news releases in Technology
  • View all news releases on IT-Director.com
  • Site Map
  • | Terms of Use
  • | Privacy

Published by: IT Analysis Communications Ltd.
T: +44 (0)1908 880760 | F: +44 (0)1908 880761