RETAIL AND TECHNOLOGY NEWS

Version 3.0 of the PCI Data Security Standards (PCI DSS) and Payment Application Data Security Standard (PA-DSS) has been published and will become effective on January 1, 2014. The PCI Security Standards Council (PCI SSC), a global forum for the development of payment card security standards, published version 3.0 to its website, but version 2.0 will remain active until December 31 to ensure adequate time for organization to make the transition.
 
The standards are updated every three years based on feedback form the Council's global members per the PCI DSS and PA-DSS development lifecycle as well as in response to market needs. Version 3.0 will help organizations make payment security part of their business-as-usual activities by introducing more flexibility, and an increased focus on education, awareness and security as a shared responsibility.
 
Overall, the updates include specific recommendations for making PCI DSS part of everyday business processes and best practices for maintaining ongoing PCI DSS compliance; guidance from the Navigating PCI DSS Guide built into the standard; and enhanced testing procedures to clarify the level of validation expected for each requirement.
 
PCI DSS requirements include:

• Evaluate evolving malware threats for any systems not considered to be commonly effected
• Combined minimum password complexity and strength requirements into one, and increased flexibility for alternatives
• Where other authentication mechanisms are used these must be linked to an individual account and ensure only the intended user can gain access
• Control physical access to sensitive areas for onsite personnel, including a process to authorize access, and revoke access immediately upon termination
• Protect devices that capture payment card data via direct physical interaction with the card from tampering and substitution
• Implement a methodology for penetration testing; if segmentation is used to isolate the cardholder data environment from other networks, perform penetration tests to verify that the segmentation methods are operational and effective
• Implement a process to respond to any alerts generated by the change
• Maintain information about which PCI DSS requirements are managed by each service provider, and which are managed by the entity
• For service providers, provide the written agreement to customers

• Payment application developers to verify integrity of source code during the development process
• Payment applications to be developed according to industry best practices for secure coding techniques
• Payment application vendors to incorporate versioning methodology for each payment application
• Payment application vendors to incorporate risk assessment techniques into their software development process
• Application vendor to provide release notes for all application updates
• Vendors with remote access to customer premises use unique authentication credentials for each customer
• Provide information security and PA-DSS training for vendor personnel with PA-DSS responsibility at least annually

SpeedLine LiveMaps, from pizza point of sale provider SpeedLine Solutions Inc., drives delivery performance and speed of service with live map data and capabilities such as mobile maps for drivers, innovative delivery zone options, and live digital wall maps. SpeedLine will offer all new and existing customers a 90-day free trial of the new mapping solution.
 
LiveMaps combines live data with easy map editing for new developments—and reduces costs by eliminating ongoing maintenance charges. An expeditor view on an optional second display speeds up dispatching. And restaurants can improve delivery times with maps and directions sent to drivers' phones—using the drivers’ own native mapping apps for hands-free navigation.
 
Delivery restaurants can also replace their outdated wall maps with a live digital map of current deliveries and zones displayed on a wall-mounted TV.
 
With address verification by geocode, restaurant operators reduce delivery errors and build a more accurate customer database for direct marketing. The built-in address verification also reduces the cost to a restaurant operator, eliminating the need to purchase a separate street database.
 
The new mapping solution also taps into a new level of analytics, with heat map views to give operators new insight into market reach, purchase trends, and delivery performance by neighborhood or zone.