Contact us
PCI-GO
  • Dashboards
  • PCI eBook
  • Blog

PCI 30 Seconds Newsletter #41 - Is the use of PCI PTS-approved devices required for PCI DSS Compliance?

10/16/2015

9 Comments

 

What is meant by PTS-approved devices?

PTS is the acronym for “PIN Transaction Security,” a set of modular evaluation requirements managed by PCI Security Standards Council that focuses on protecting POI (Point-Of-Interaction) devices.

POI is used here as a generic term for card present payment devices (hardware & software). It covers ATM's and POS (Point-Of-Sale) devices whether they be attended, i.e. manned by merchants, or unattended (UPT), i.e. parking payment automated machines.

PTS-approved terminals actually means card payment devices or terminals complying with the PCI PTS requirements.

Picture

Could the use of non PTS-approved devices jeopardize your PCI DSS compliance? 

Here is the answer:


According to PCIco  (FAQ)

"While use of PTS-approved payment devices can facilitate PCI DSS compliance, such devices do not by themselves guarantee PCI DSS compliance or reduce the scope of a merchant’s cardholder data environment. The boundaries of the cardholder data environment are not affected by the presence or absence of a PTS-approved terminal, and any terminal interactions with the merchant’s environment are in scope for a merchant’s PCI DSS implementation.   PTS approved devices must be reviewed during a PCI DSS assessment to confirm that they are configured properly and that the security functions and settings have not been disabled.  For example, the assessor would verify that the terminal has not been configured by the merchant to store sensitive authentication data after authorization or to transmit clear-text account data over the Internet.

It should be noted that while PCI DSS does not require the use of PTS-approved devices, some payment brands have requirements for the use of PTS-approved devices. Entities should contact their acquirer or the payment brands directly for information about any such requirements."

Is this valid in all cases?
 
According to Jeremy King: the answer is no.
It depends which country the merchant is based in. If they are in a EMV based country then the brands demand PCI PTS terminals for DSS Compliance. If it is a non EMV based country then they do not use PTS approved terminals and are not subjected to the above requirement. 

EMV stands for “Europay, MasterCard, and Visa”  and consists of a technical standard for smart payment card, terminals and ATM's that can accept them. EMV cards are smart cards (also called chip cards or IC cards) which store their data on integrated circuits rather than  magnetic stripes, although many EMV cards also have magnetic stripes for backward compatibility.

To conclude: 
The use of PTS approved devices is required for PCI DSS compliance ONLY for EMV based country. Check the EMVco Website (here under) for a glimpse on the EMV deployment regions and rates  

Links

  • Ready to use PCI Procedures & Templates
  • PCI DSS V3.1 Compliance Dashboard
  •  EBook: PCI, That’s the Way It Is.
  • PCI PIN Transaction Security Requirements
  • EMVco deployment data
Picture
9 Comments
Edirne baymak servisi link
8/4/2022 12:32:16 am

Edirne baymak servisi hizmetlerimiz memnuniyet odaklıdır. Detayları incelemek için hemen web adresimize göz at! https://www.edirneklimaservisi.com/edirne-baymak-servisi/

Reply
betpark link
12/18/2022 01:19:31 pm

Betpark giriş adresi burada.

Reply
instagram takipçi satın al link
12/19/2022 02:59:23 pm

İnstagram takipçi satın almak istiyorsan tıkla.

Reply
casino siteleri link
12/21/2022 06:16:32 am

Canlı casino sitelerine ulaşmak istiyorsan tıkla

Reply
kralbet link
12/21/2022 02:03:02 pm

Kralbet giriş adresine ulaşmak istiyorsan tıkla.

Reply
100 tl bonus veren siteler link
1/4/2023 04:19:10 pm

100 tl deneme bonusu veren siteleri öğrenmek istiyorsan tıkla.

Reply
Ordu Escort link
7/26/2023 10:55:57 am

https://ordu.escortdocs.com/ teşekkürler

Reply
ankara travesti link
9/18/2024 02:37:04 am

ankara travesti

Reply
child porn link
12/7/2024 08:22:54 pm

child porn here. click and go watch child porn

Reply



Leave a Reply.

    Archives

    October 2023
    September 2023
    July 2023
    June 2023
    May 2023
    April 2023
    March 2023
    February 2023
    April 2020
    July 2019
    February 2019
    January 2019
    August 2018
    May 2018
    February 2018
    January 2018
    December 2017
    October 2017
    July 2017
    June 2017
    April 2017
    February 2017
    January 2017
    December 2016
    July 2016
    June 2016
    May 2016
    April 2016
    February 2016
    January 2016
    October 2015
    August 2015
    January 2015
    July 2014

    RSS Feed

Powered by Create your own unique website with customizable templates.