PCI Security Vendor Alliance Adds 12 New Members
As the June 30, 2007 deadline for compliance with the payment card industry (PCI) data security standard looms, more vendors join an organization formed to share best practices for compliance with the new standard.
The twelve new members are:
- Networking and communications equipment provider Adtran.
- AirMagnet, a provider of wireless LAN planning, management and troubleshooting solutions.
- Consultancy Compliance Security Partners.
- Enterprise software and IT services provider Compuware.
- Control Path
- Envision, a computer monitor manufacturer.
- GSI Hosting.
- Software security services provider Ounce Labs.
- Data security and compliance consultancy Patrick Townsend & Associates.
- Tripwire, a provider of configuration audit and control solutions.
- Unified Compliance Framework.
- Application security company Visonys AG.
The PCI SVA is an association of data security firms that joined together in January 2007 to help merchants and financial services companies complywith the PCI Data Security Standard (PCI DSS). Established by major credit card companies in the Fall of 2006 after a wave of data breaches compromised consumers' personal information, the PCI data security standard is intended to improve the security of credit and debit card transactions—online, in stores and in companies' back office systems. All organizations that store, process or transmit credit and debit card transactions are required to demonstrate compliance with the PCI data security standard by June 30, 2007. Those who aren't compliant will be subject to fines or have their ability to accept credit cards shut off by the credit card companies.
The PCI program is private industry's biggest and most ambitious attempt to regulate its information security practices. CSO reported on the effort in the April 1, 2007 issue.