X9 and PCI SSC Combine Expertise on PIN Acceptance Security Standards
WAKEFIELD, Mass., 14 February 2018 – In response to industry feedback, the Accredited Standards Committee X9 Inc. (ASC X9) and the PCI Security Standards Council (PCI SSC) have announced a joint initiative to create one unified PIN Security Standard for payments stakeholders.
Currently PCI SSC and ASC X9 maintain separate PIN security standards. Depending on its affiliation, an organization could be subject to the PCI PIN Security Standard or the X9 TR39 PIN Standard – or both. According to industry feedback, clear efficiencies would be gained by a consolidation of the standards.
Consolidation will provide simplification and reduce effort for organizations that might otherwise be subject to both.
The goal of this joint initiative will be to help create a single PIN security standard and assessor qualification program to be managed by the PCI SSC. A newly formed PCI PIN Assessment Working Group, made up of ASC X9, PCI SSC and payment brand representatives, will collaborate to ensure that the resulting standard satisfies both PCI and ASC X9 requirements.
“We are thrilled to work collaboratively with ASC X9 on this worthwhile endeavor,” said PCI SSC Council Chief Technology Officer Troy Leach. “Our two organizations have always enjoyed a strong working relationship, and this is an issue we are confident we can address by working together. The outcome of this effort should help simplify PIN standards and assessor programs for payment card industry stakeholders.”
Steve Stevens, the Executive Director for ASC X9, stated, “I am enthusiastic about X9 joining the PCI PIN Assessment Working Group and the opportunity to unify X9TR-39 with the PCI PIN Security Standard.
The resulting PCI PIN Standard will simplify network security audits reducing the cost to the financial services industry.”
About the PCI Security Standards Council
The PCI Security Standards Council (PCI SSC) leads a global, cross-industry effort to increase payment security by providing industry-driven, flexible and effective data security standards and programs that help businesses detect, mitigate and prevent cyberattacks and breaches. Connect with the PCI SSC on LinkedIn. Join the conversation on Twitter @PCISSC. Subscribe to the PCI Perspectives Blog.
For further PCI Security Standards Council media information please contact press@pcisecuritystandards.org.
About the Accredited Standards Committee X9 Inc.
The Accredited Standards Committee X9 Inc. is a non-profit organization accredited by the American National Standards Institute (ANSI) to develop both domestic and international standards for the financial services industry. X9 has over 100 member companies and over 400 company representatives that work to develop and maintain approximately 100 domestic standards and 58 international standards.
The subjects of X9’s standards include: retail and mobile payments; printing and processing of checks; corporate treasury functions; block chain technology; processing of legal orders issued to financial institutions; tracking of financial transactions and instruments; tokenization of data; protection of financial data at rest and in motion; electronic contracts; and remittance data in business payments. X9 also performs the secretariat function and provides the committee chair for ISO TC 68, which producesinternational standards for the global financial services industry. For more information about X9 and its work, visit www.x9.org. Follow ASC X9 on Facebook, LinkedIn and Twitter.
Judith Vanderkay, Mark Meissner
ASC X9 Public Relations PCI Security Standards Council
1 (781) 883-3793 1 (202) 744-8557
jvanderkay@gmail.com mmeissner@pcisecuritystandards.org
