- \n
- PCI Compliance Fail<\/a><\/li>\n
- \u00a0Credit card authorization forms \u2013 a weak link for compliance<\/a><\/li>\n
- Is your service provider PCI Compliant?<\/a><\/li>\n
- Software Updates<\/a><\/li>\n
- Microsoft CRITICAL updates issued this year<\/a><\/li>\n
- CenPOS Question of the Month<\/a><\/li>\n
- WHAT DOES CHRISTINE SPEEDY DO ANYWAY?<\/a><\/li>\n<\/ul>\n
<\/a>PCI Compliance Fail<\/span><\/span><\/strong><\/p>\n
80% of companies FAIL an interim Payment Card Industry Data Security Standards (PCI-DSS) audit. It’s time to admit it- you’re company is one of the many struggling to keep up with new rules.<\/p>\n
Have you noticed $19.95 fee sneak back into your merchant statements?
\n![\"\"](\"https:\/\/gallery.mailchimp.com\/b62a9a3effa2f4c6c81a9fa51\/images\/75f8cd88-b6b6-4679-864f-cb285a4b65b4.jpg\")
<\/strong><\/p>\nCheck your quarterly scans. You may discover a scan failed with a reason related to SSL.\u00a0 Fight back to stop these monthly fees. Not only is it premature, but the Payment Card Industry Security Standards Council (PCI SSC) changed the migration to date requiring TLS 1.1 encryption or higher from June 2016 to June 2018.<\/p>\n
\n<\/a>\u00a0Credit card authorization forms \u2013 a weak link for compliance<\/strong><\/span><\/p>\n
\u201cWe keep all cardholder data in a locked file drawer and I\u2019m the only one with a key\u201d <\/em>does not comply with PCI 3.0 standards.
\n![\"\"](\"https:\/\/gallery.mailchimp.com\/b62a9a3effa2f4c6c81a9fa51\/images\/148df81d-0687-4a36-9758-0f4580efe774.jpg\")
For new best practices, think like a forensic auditor. In the event of a suspected breach, how will you identify who, what, when, how, and maybe even where card data was touched? Without a system to automate logging, the time and cost of an audit will explode.<\/p>\nTIPS.<\/p>\n
- \n
- Unprotected data cannot <\/u>be sent via messaging technologies<\/strong> such as e-mail, instant messaging, chat, etc. (PCI section 4.2)<\/li>\n
- PAN data (card number) cannot be stored unencrypted<\/u>.<\/strong> (PCI section 3.x)<\/li>\n
- Sensitive authentication data, which includes the security code (CVV\/CID), can never be stored<\/u>.<\/strong> (PCI section 3.2)<\/li>\n<\/ul>\n
Every moment a paper form exists, there\u2019s an opportunity for misuse and identity theft. If your company extends credit, then Red Flags Rules also apply. The FTC can seek both monetary civil penalties and injunctive relief for violations. All told, the expense of a breach could run over a million dollars, uncovered by insurance, plus ongoing lost business due to damaged reputation.<\/p>\n
\n<\/a>Is your service provider PCI Compliant?<\/span><\/strong><\/p>\n
If a third party touches card data, they\u2019re required to register with the card brands and have an annual on-site audit<\/u><\/strong>. That includes your payment gateway, caging service, and other software if their payments are not segregated from the applications. Click here to search the Visa service provider database\u00a0<\/a>
![\"\"](\"https:\/\/gallery.mailchimp.com\/b62a9a3effa2f4c6c81a9fa51\/images\/221bb814-9ae0-4872-8ccf-dba4b08b9512.jpg\")
<\/a><\/p>\n
\n<\/a>Software Updates<\/span><\/strong>
\nReminder: PCI section 6.1 mandates software security updates be applied within 30 days.\u00a0 With all the activity lately, that means every month. Windows XP users are automatically non-compliant<\/strong>. Click here for Internet Explorer & other <\/a>Microsoft CRITICAL updates issued this year<\/span><\/p>\n
\n<\/a>CenPOS <\/strong>Question of the Month<\/strong><\/span><\/p>\n
How can we collect cardholder data for B2B card not present customers without our credit card authorization form?<\/strong><\/p>\n
- \n
- Hosted online pay page<\/li>\n
- Electronic request for payment (push to email or text)<\/li>\n
- Electronic bill presentment & payment<\/li>\n
- All of the above and a PCI Compliant authorization form<\/li>\n<\/ol>\n
![\"\"](\"https:\/\/gallery.mailchimp.com\/b62a9a3effa2f4c6c81a9fa51\/images\/27b3ee1b-37cd-4952-873a-0d6073a9be51.jpg\")
<\/a><\/p>\nPCI Compliant credit card authorization form example: Video<\/span><\/h3>\n
Training & educational videos https:\/\/www.youtube.com\/user\/3Dmerchant\/videos<\/a><\/p>\n
Christine Speedy<\/p>\n
![\"\"](\"https:\/\/gallery.mailchimp.com\/b62a9a3effa2f4c6c81a9fa51\/images\/logo_mobi_combo_ph.png\")
<\/a>
\n<\/a>WHAT DOES CHRISTINE SPEEDY DO ANYWAY? <\/span>
\nOmnichannel payment solutions targeting\u00a0 middle market ($10M to $1B per year), primarily to technology companies and distributors. With one call, I can provide any gateway, acquirer, or integrated solution.\u00a0 Best of all, I’m agnostic- you can keep your merchant services or check processors. Call today for a free consultation and for answers about any burning question for business to business<\/strong>.<\/p>\nCenPOS is a processor agnostic end to end payment engine that increases EBITDA virtually instantly. From compliance to automating collections, we solve everyday business problems. Protecting the front door with US EMV certified multi-lane terminals for all processors and the back door with 3-D Secure certified solutions for customer initiated sales. Now in over 140 countries.<\/p>\n
\n\nBatch processing accounts receivable and donations- Caging services solutions<\/a><\/div>\nFeb 01, 2016 1:04 pm | Christine Speedy<\/div>\nReplacing ICVerify or other legacy software for batch credit card processing? Whether you\u2019re in the cloud, or headed there, methods of payment processing have changed to meet current and future requirements for PCI Compliance and fraud prevention. For service providers, \u2026 Continue reading ?<\/span><\/a><\/p>\n
comments<\/a> | read more<\/a><\/div>\n![\"Like](\"https:\/\/cdn-images.mailchimp.com\/fb\/like.gif\")
<\/a>\u00a0\u00a0 ![\"Google](\"https:\/\/cdn-images.mailchimp.com\/google-plusone.png\")
<\/a>\u00a0\u00a0 ![\"share](\"https:\/\/cdn-images.mailchimp.com\/social_connect_tweet.png\")
<\/a><\/div>\n<\/div>\n\nAccept Payments Online<\/a><\/div>\nJan 25, 2016 11:14 am | Christine Speedy<\/div>\nWinter Storm Jonas is a reminder of the importance for business to business companies to accept payments online. What if you have a desktop terminal, but staff is working from home? How can accounts receivable be reached for call in \u2026 Continue reading ?<\/span><\/a><\/p>\n
comments<\/a> | read more<\/a><\/div>\n<\/a>\u00a0\u00a0 <\/a>\u00a0\u00a0 <\/a><\/div>\n<\/div>\n\nCAPK expired error messages on VeriFone EMV terminals<\/a><\/div>\nJan 13, 2016 8:36 am | Christine Speedy<\/div>\nGetting a VeriFone EMV Vx520, FD55, Vx510, Vx570 CAPK expired error message? Visa has extended the EMV key\u2019s expiration date from 12\/31\/2015 to 2022, and the terminal must be updated. OPTION 1: UPDATE CAPK FILE ONLY via partial download For \u2026 Continue reading ?<\/span><\/a><\/p>\n
comments<\/a> | read more<\/a><\/div>\n<\/a>\u00a0\u00a0 <\/a>\u00a0\u00a0 <\/a><\/div>\n<\/div>\n\nCard Not Present Token Billing Best Practice & CenPOS Training<\/a><\/div>\nJan 12, 2016 2:04 pm | Christine Speedy<\/div>\nReady to improve PCI Compliance with token billing? Step by step instructions for CenPOS card not present token billing including creating, modifying, and using tokens follows. In the virtual terminal admin, Create a new Role* or Modify an existing role \u2026 Continue reading ?<\/span><\/a><\/p>\n
comments<\/a> | read more<\/a><\/div>\n<\/a>\u00a0\u00a0 <\/a>\u00a0\u00a0 <\/a><\/div>\n<\/div>\n\n3rd PARTY CREDIT CARD AUTHORIZATION FORM<\/a><\/div>\nJan 11, 2016 12:26 pm | Christine Speedy<\/div>\nNeed a 3rd party credit card authorization form template? Don\u2019t count on wikiform.org and other internet resources that scrape the internet for free content and then redistribute it. There\u2019s no guarantee that anything published is accurate, legal, or virus free. \u2026 Continue reading ?<\/span><\/a><\/p>\n
comments<\/a> | read more<\/a><\/div>\n<\/a>\u00a0\u00a0 <\/a>\u00a0\u00a0 <\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/td>\n<\/td>\n \n
- PAN data (card number) cannot be stored unencrypted<\/u>.<\/strong> (PCI section 3.x)<\/li>\n
- \u00a0Credit card authorization forms \u2013 a weak link for compliance<\/a><\/li>\n
![\"\"](\"https:\/\/gallery.mailchimp.com\/0d61bb2ec9002f0e9872b8c36\/images\/tape_bottom.png\")
<\/td>\n<\/tr>\n![\"\"](\"https:\/\/gallery.mailchimp.com\/0d61bb2ec9002f0e9872b8c36\/images\/icon_twitter.4.png\"){kind=icon}
<\/td>\n![\"\"](\"https:\/\/gallery.mailchimp.com\/0d61bb2ec9002f0e9872b8c36\/images\/icon_facebook.4.png\"){kind=icon}
<\/td>\n