a PCI compliant gateway and/or POS is NOT enough to avoid fines from MC/Visa

Hi,

This weekend I was reviewing a bulletin sent out to ticketbrokers from one of the Ticket POS organizations. I noticed that they left out a VERY important piece of information. The simple fact is that virtually all current versions of gateways, shopping carts and POS systems are PCI complaint as far as encryption. However this is not the only place where cardholder identity is compromised. It doesn’t matter how good your POS system, gateway or shopping cart is you still have an IP connection to the internet and the only way to be totally compliant so that your processor doesn’t pass through fines to you from their bank is to have a certified security firm scan your server/computers on an ongoing basis.

For some reason many of you believe the scanning fees would be $160.00 per quarter. Many of you have told me that and I’m not sure where that came from. The fees are much, much less with our company of choice ControlScan https://www.controlscan.com/index.php sponsors of this year’s NATB show http://www.natb.org/convention/sponsors.cfm

Their typical charge for a Level 4 merchant which most of you are is only $149.00 per year. This actually includes weekly scanning and quarterly reports, it is impossible to provide a compliant quarterly scan report with only 1 scan per quarter. Also included in this service is the Self Assessment Questionnaire (has to be submitted yearly for compliance) and our Breach Protection. You can pay monthly if they like. The cost is $149/year or $15/month, so you save a bit of money if you purchase an annual membership. As I have mentioned before I receive no commissions or referral fees from them in order to keep the cost down top my merchants.
For this price there is absolutely no reason that any of you using an IP connection to enter cc orders shouldn’t be compliant. Call Andrea Butler at (800) 825-3301 or email Andrea Butler < abutler@controlscan.com>

Bill Hoidas
Payment Consultant Manager
Larger B2B/MOTO/Internet Accounts
Product Development Manager
Matrix Payment Systems
(847) 381-3482 office
(847) 381-4289 fax
http://paymentconsulting.net
http://chicago.citysearch.com/profile/44659273/barrington_il/matrix_payment_systems.html
John 3:16 For God so loved the world, that he gave his only begotten
Son, that whosoever believeth in him should not perish, but have
everlasting life.