True data security requires more than PCI compliance

Not too long ago, Payment Card Industry (PCI) Data Security Standard (DSS) compliance was the only thing merchants, ISOs and acquirers had to worry about when tackling data security and protection. Today, in this new era of frequent data breaches and heightened data privacy, security and protection requirements, PCI compliance is just one of many things businesses must address.

And the burden is great for large and small merchants alike; however, it is significantly more difficult for mom-and-pops to address without the substantial financial, technology and manpower resources that only big-box retailers can typically afford.

Compliance help is at hand

Las Vegas-based Conformance Technologies is a provider of operating systems, education systems and expertise used in managing business compliance requirements. The company draws on decades of payments industry experience to help small merchants and the acquirers that serve them tackle data security and compliance head-on in a number of innovative ways.

Evolving from a payment consultancy and PCI compliance firm established in 2003, Conformance Technologies today bills itself as a leading provider of automated compliance and sensitive data protection systems and services. The company noted that its services are distributed through resellers and "operators" of merchant portfolios, and that it enables businesses to increase compliance rates, lower operating costs and generate ongoing revenue streams.

The company prides itself on providing simple, easy-to-use, cost-effective merchant solutions that address a number of thorny data security and compliance issues and activities. These solutions also help acquirers and ISOs protect their businesses and their merchant portfolios – all with the ability to generate significant income, Conformance Technologies said, adding that more than 250,000 end users located domestically and around the world rely on its solutions to protect their businesses every day.

Products, services cover the bases

Conformance Technologies credits ingenuity for driving the development of a host of new products and services it has recently brought to market with rapid uptake, and described its five key solutions as follows:

• PCI ToolKit: Simplifies PCI DSS merchant compliance validation with a cost-effective solution (Patent granted: US 13/336,334).
• Data Incident Management Program: Effectively responds to business data incursion incidents on behalf of merchants, thereby reducing ISO risk and operational costs.
• Cyber Attack Readiness ToolKit: Helps merchants easily and cost-effectively perform penetration testing (often referred to as pen-testing) and Primary Account Number (PAN) scanning to meet PCI DSS 3.0 Requirement 11.3 at a price that is 80 to 90 percent less than the standard market price, allowing for reseller mark-up.
• TINMatch ToolKit: Eliminates the tedious effort of IRS taxpayer identification number matching.
• Data Lifecycle ToolKit: Automates management of all sensitive and nonsensitive data within business and retail environments.

End users are serviced and supported at three centers located in Reno, Nev.; Orange County, Calif.; and San Antonio, Texas.

Experience informs growth

Conformance Technologies President Darrel Anderson has more than 25 years of executive experience at such companies as Total System Services Inc., US Financial Services Group and Canadian Imperial Bank of Commerce. He served on the board of directors for Caribbean Integrated Financial Systems Network and for CariCard Services Ltd., the largest independent credit card processor in the Caribbean.

Anderson is also a fellow of three prominent organizations: the Institute of Canadian Bankers, the Canadian Securities Institute and the European Privacy Association. Through the International Association of Privacy Professionals, he holds both the CIPP/C (Canada) and CIPP/US (United States) designations. In addition, he holds a CPP designation from the Electronic Transactions Association and is a Certified YouTube Audience Growth Specialist.

Anderson believes his keen understanding of market trends and the need for acquirers and ISOs to generate revenue beyond the transaction make Conformance Technologies a company to watch. And the company he helms intends to continue its prolific efforts as the topic of data privacy, security and protection remains center stage.

Notice to readers: These are archived articles. Contact names or information may be out of date. We regret any inconvenience.