MasterCard’s PTS program is applicable to the hardware portion of the Point-of-Sale (POS) terminal and applies to applications that transmit card data across an open Internet Protocol (IP) or wireless connection. Payment terminal manufacturers seeking PTS compliance validation engage a firm such as Trustwave to perform an evaluation similar to that of a penetration test to verify that the POS conforms to standards set forth by MasterCard.
The objective of the security evaluation program for IP-enabled POS devices is to ensure the necessary level of protection for transaction and cardholder data at merchants that use equipment that support the TCP/IP protocol suite. The security evaluation verifies that POS devices meet relevant requirements in terms of confidentiality, integrity and communicating parties’ authentication. This security program complements existing security programs at MasterCard that already address merchants or POS terminals like the Payment Card Industry Data Security Standard (PCI DSS) and PCI PIN Entry Devices (PED).
“Protecting the payment application landscape from malicious attacks is just one aspect of credit card security to which merchants must adhere,” says Robert J. McCullen, chairman and CEO of Trustwave. “Trustwave had to pass a skills test and secure its testing lab in order to gain approval to perform evaluations on compliance. We are very proud to have been certified by MasterCard and are happy to offer it as a service to our customers.”
About Trustwave
Trustwave is the leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today’s challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper® compliance management software and other proprietary security solutions. Trustwave has helped thousands of organizations—ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers—manage compliance and secure their network infrastructure, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, Asia and Australia. For more information, visit https://www.trustwave.com .
Source: Company press release.