AJB Footnotes Winter 2014

AJB Footnotes Winter 2014
The AJB Software Design community newsletter
AJB @ NRF 2014, Javits Center, NY, NY
IN THIS ISSUE
SECURITY ISSUE
Top Story:
PA-DSS 3.0: What
Merchants Need to Know
PA-DSS 3.0:
What Merchants Need to
Know
Simon Li, Manager, PCI Compliance, AJB Software Design Inc.
With technology advancing in leaps and bounds, merchants are struggling to keep up with securing payment systems that work with EMV,
Managed Payments Solutions
mobile and social media. Combined with the complexities of PCI comHelp Secure Cardholder Data
pliance, it is no wonder that retailers are looking to decrease the friction
Keep Your Options Open While points required to annually validate their payment systems.
Eliminating Scope at the POS
Industry Buzz- Smart Card
Alliance Payments Summit
Partner Highlights
Heartland Payment Systems
Spotlight on AJB
Larry Muldoon
Vince Oppedisano
Ron Singh
AJB Events Calendar
AJB In the News
AJB Makes EMV Easy for J Crew
Heartland Partners with AJB
AP NRF Coverage
Questions or comments?
[email protected]
As a result, the third major version of PCI’s Payment Application Data
Security Standard (PA-DSS) was announced November 2013 with much
anticipation by merchants & payment application vendors. The endgame of PA-DSS is to reduce the merchants pain-points in using a PADSS certified application to support their PCI-DSS efforts. Based on
initial feedback from the QSA, merchant and vendor communities, the
new standard takes big steps to address shortcomings of the previous PADSS 2.0 standard. Key new features include requirements for protection
of card data in memory and more rigorous risk assessment processes.
So when does PA-DSS 3.0 become effective and when do current PA-DSS
2.0 validated payment applications expire? Officially, merchants can start
using PA-DSS 3.0 applications optionally on January 1, 2014. For netnew products, PA-DSS 3.0 is mandatory on January 1, 2015. Customers
on existing payment products validated against PA-DSS 2.0 products, can
use these products until October, 2016.
Continued on Page 3
Missed a Technical Webinar? Email us today for a copy of a past
presentation!
[email protected]
Recent Webinars
A) Managed Service Options
B) EMV in Retail
AJB Footnotes Winter 2014
Managed Payments Solutions Help Secure Cardholder Data
Travis Lee, Director of Strategic Partnerships and Product Marketing
Transaction Network Services
Consumers who provide merchants with their sensitive cardholder data are placing significant trust in them
to protect it from unscrupulous individuals. However, as the number of cyber-attacks continues to grow, many
merchants are still leaving themselves vulnerable.
One of the easiest ways to secure and protect cardholder data is by using a PCI DSS certified managed payments
solution which also offers point-to-point encryption and tokenization; a combination that when properly deployed can greatly reduce a merchant’s PCI-DSS scope.
Travis Lee, Director of Strategic Relations and Product Marketing, and Umer Ayub, Vice President of Global
Risk Management, at TNS, provide an insight into how these technologies can help merchants strengthen their
payments infrastructure.
Read our article in full here:
http://www.tnsi.com/tnspay/tnspay-solution/tnspay-direct/ajb-newsletter-article-2
AJB IN THE NEWS
AJB Makes EMV Easy for J Crew
Heartland Partners with AJB to Reduce Transaction Costs for Merchants
Associated Press NRF Coverage
AJB @ NRF - Booth # 1561
The National Retail Federation’s “Retail’s BIG Show”, held in New York City,
NY, brought together over 30,000 attendees to the Javits Center, including
representatives from the AJB Sales and MARCOM team and our partner
TNS. Always a pleasure to see our AJB community merchants at the show
and meet with new prospective merchants alike.
The 2014 show hosted more than 300 exhibiting organizations and was held
January 12-15, 2014. See everyone next year in New York City.
Spotlight on AJB:
Larry Muldoon
Position: Senior Technical Writer
Years with AJB : 1 year, 6 months
Upcoming: Create and manage documentation for new
products and customers, in particular future Web Portal
products, with intuitive online help documents as well as our
standard printed resources.
Quote: “Genius is the ability to reduce the complicated to
the simple.” C. W. Ceram
Personal Interests: Reading, baseball, and writing.
2
AJB Software Design Inc. 5255 Solar Drive Mississauga ON L4W 5B8 Canada
Larry in the testing lab
at the AJB head office in
Mississauga, ON.
ajbsoftware.com
AJB Footnotes Winter 2014
AJB Events Calendar
PCATS AGM - April 28-May 2
Loews Ventana Canyon Tucson, AZ
Exchange 2015 - AJB users’s conference
is a biennial event with our next planned
conference targeted for late spring 2015.
Stay tuned for more details!
Other Upcoming
events for AJB include
SWPetro, NACS show,
and NCR Synergy
Spotlight on AJB:
Vince Oppedisano
Position: Senior Support Analyst
Years With AJB: 6 years
Upcoming: Continue to support customers and assist with daily issues.
Quote: “You miss 100 percent of the
shots you don’t take.” Wayne Gretzky
Personal Interests:
Vince enjoys travelling
around the globe, as well
as watching and playing
sports including hockey,
baseball,and football.
Continued from Cover
Both the PA-DSS and PCI-DSS are maturing, and the clarification of several requirements in version 3.0 reflects
this. The new standards will allow customers to more thoroughly integrate their PA-DSS software into their PCIDSS assessments while reducing risk. AJB looks forward to delivering its first PA-DSS 3.0 products in 2014. For
more information on PA-DSS 3.0 requirements and effective dates please see: http://www.ajbsoftware.com/News.aspx
Keep Your Options Open While Eliminating Scope at the POS
Phil Stead, Vice-President, Retail Systems, Reliant
Taking the POS out of scope ultimately provides retail merchants with a secure, robust, and flexible payment architecture positioned for ongoing innovation. This involves isolating & removing all components
involved in storing, processing & transmitting cardholder data from the POS workstations. The benefits
include:
•Singular Point Of Entry – all credit card entry occurs securely directly through the payment
device for all electronically authorized tender types.
•Payment Processor Flexibility – an open architecture ultimately provides both the lowest cost
& highest value with any bank processor.
•Payment System Innovation – New technologies can be on-boarded leveraging the same
payment infrastructure at store level through a converged infrastructure strategy.
•Payment Hardware Dexterity – select from any certified vendor payment device with
reusable/upgradable security and not be locked in by a specific bank technology.
Isolating the in-store payment processing environment ultimately provides dramatic scope reduction,
hardware dexterity, innovation options and flexible bank processing. This strategy positions retail merchants for both a sustainable payment technology platform & a predictable cost structure for today’s
complex technological landscape.
To understand more about Reliant, strategies to take POS out of Scope – contact Phil Stead Vice President Of Retail Systems at [email protected] or at (646)867-1270.
AJB Software Design Inc. 5255 Solar Drive Mississauga ON L4W 5B8 Canada
ajbsoftware.com
3
AJB Footnotes Winter 2014
Industry Buzz- Smart Card Alliance Payments Summit
Feb 5-7, Salt Lake City, Utah.
Bohdan Myroniw, Director Business Development, AJB Software Design
Earlier this month at the 7th Annual Smart Card Alliance Payments Summit, industry experts reviewed the implications of the current EMV plans for the USA. It was clear that merchants need to invest in new hardware and plan for
enough time to get through the EMV certification cycle. Processors and acquirers will have to handle a lot of merchants’ certification requests ahead of the fast-approaching EMV October 2015 deadline. Discussions on PIN versus
signature capture authentication methods for cardholder verification are still pending and dependent on individual
bank issuers. The consensus in the room was that we will be supporting both methods.
The EMV deadline is an opportunity to converge and layer other important payment initiatives. Specific consideration
should be made to look at enhanced protection of the magnetic stripe with P2PE and tokenization efforts, to replace
the PAN and additional de-scoping of the POS from PCI. These are safe harbor initiatives that enhance the protection
of consumer card data that flows through the merchants’ infrastructure.
The mobile track at the conference emphasized the need to consider mobile POS EMV hardware capabilities and RFID
hardware capabilities. Future proofing involves looking ahead and seeing what contactless cards and mobile NFC
payments can do. Merchants need to be aware that these mobile technologies are in the field today and customers will
soon be coming to your store carrying them as forms of payment.
For more information on any of the above please contact your AJB account executive for details.
We value our people.
Join Our Team Today
Innovative
Passionate
Flexible
http://www.ajbsoftware.com/company/careers.aspx
Partner Highlights
Spotlight on AJB:
Heartland Payment Systems, Inc. (NYSE: HPY),
the fifth largest payments processor in the
United States, delivers credit/debit/prepaid card
processing, mobile commerce, e-commerce,
solutions, security, payroll solutions, and
related business solutions and services to more
than 275,000 business and educational locations
nationwide.
Position: Business Analyst
Years with AJB: 1 year, 9 months
Upcoming: Currently working on innovative mobile retail and petroleum solutions
for major companies globally. Working
across all levels of AJB and involved with
initiatives ranging from defining strategy,
creating the enterprise architecture, taking
a leadership role by defining the goals and
requirements for projects and programs
or supporting continuous improvement in
technology and processes.
Interests: Travelling to exotic places,
investing into the capital markets, playing
sports and eating exotic foods.
4
Ron Singh
AJB Software Design Inc. 5255 Solar Drive Mississauga ON L4W 5B8 Canada
Quote: “We are what we
repeatedly do. Excellence,
then, is not an act but a
habit.”
Aristotle
ajbsoftware.com

Download Report