ControlCase Authorized to Certify PCI Compliance with New Point-to-Point Data Encryption Standards
(McLean, VA) – As Payment Card Industry (PCI) compliance standards continue to evolve, ControlCase remains at the forefront of data security management. The company has already revolutionized PCI compliance with its innovative, comprehensive Compliance as a Service platform. ControlCase now builds on that industry-leading reputation with its recent authorization as a Qualified Security Assessor (QSA) for the newest PCI Point-to-Point Encryption (P2PE) standards.
In order to keep pace with the steady stream of technology improvements in the retail landscape – such as the growing use of mobile payment acceptance – the PCI Security Standards Council (PCI SSC) has adapted the framework of PCI compliance with changes to the existing P2PE standards. The changes, issued in April 2012, ensure that card holder data is encrypted at the very first Point of Sale (POS), whether the POS is a traditional retail terminal or a mobile payment application.
These new standards may potentially bring major benefits to merchants. When implemented properly, the use of P2PE solutions may actually simplify a merchant’s annual PCI Data Security Standards (DSS) compliance requirements. As a result, costs for the merchant may decrease as well. And with the added security and mitigation of potential breaches the new standards bring, merchants may be better able to take advantage of the growing range of technologies – such as mobile payment acceptance – that are blossoming in the market.
ControlCase is one of only a handful of PCI compliance certification firms globally authorized to certify to P2PE standards. As a QSA P2PE, ControlCase is qualified to validate the full range of payment applications and encryption device management solutions that P2PE providers offer to merchants.
This latest accreditation is a central part of ControlCase’s mission to help organizations achieve compliance more quickly, more consistently. “PCI-related compliance services are a core focus at ControlCase,” explained CEO Kishor Vaswani. “We provide a single source for compliance solutions in the payment card industry, which means we must consistently maintain the highest qualifications and skill sets. In this way, we can continue to help our clients respond to regulatory environment changes and implement the latest security standards that may improve their efficiency and reduce their costs.”
For more information about ControlCase and the latest P2PE standards, visit www.controlcase.com or call 703.483.6383.
About ControlCase
ControlCase enables organizations worldwide to consistently and efficiently achieve compliance with all aspects of their information technology operations. The company’s pioneering Compliance as a Service (CaaS) platform revolutionized the industry by bringing all aspects of managed compliance, from software to training and certification, into a single, comprehensive application – at a fraction of the cost of obtaining each component individually. As a result, clients are better able to address regulations such as Payment Card Industry Data Security Standards (PCI DSS), Sarbanes Oxley (SOX), Gramm-Leach Billey Act (GLBA) and Health Insurance Portability and Accountability Act (HIPAA), to name a few. With a strong focus on PCI compliance, ControlCase is a certified ASV vendor, a DSS Qualified Security Assessor (QSA), and a QSA for Point-to-Point Encryption (QSA (P2PE)). ControlCase is headquartered in McLean, Virginia, with locations in North America, Europe, Asia/Pacific and the Middle East.
