GS Logo
The Green Sheet, Inc

Please Log in

A Thing
View Archives

View PDF of this issue

Care to Share?

Table of Contents

Lead Story

Lose the price war, win the merchant


Industry Update

Tribul Merchant Services: Bullish on merchants

Visa's vigilance pays off, PCI compliance takes off

When the system is down: Yipes!

Amazon flexes muscles with flexible payments

Cashless vending catches on


Taking the kiosk to the ATM

Tracy Kitten

Industry Leader

Mary Gerdts –
Pluck and intergrity lead from bean field to board room


Knock fraudsters down with knowledge

Patti Murphy
The Takoma Group

Certify the good, blacklist the bad

Biff Matthews
CardWare International


Street SmartsSM:
Buyer beware: That means you, dear MLSs

Dee Karawadra
Impact PaySystem

Risk assessment: What you need to know

Ross Federgreen

A real-life approach

Nancy Drexler
Marketing Moguls

Primo processor practices

Adam Atlas
Attorney at Law

The key to EBT

Jason Felts
Advanced Merchant Services Inc.

Banish chargebacks through communication

Steve Schwimmer
Renaissance Merchant Services

Company Profile

All card Processing-AAMonte-USA

3 Delta Systems

New Products

Merchant boarding simplified

Product: Comprehensive merchant application
Company: United Bank Card Inc.

Easy-as-pie PCI compliance

Product: HackerGuardian PCI PLUS Daily Scanning
Company: Comodo


Feed your reps, and they'll feed you



Resource Guide


A Bigger Thing

The Green Sheet Online Edition

August 27, 2007  •  Issue 07:08:02

previous next

Visa's vigilance pays off, PCI compliance takes off

Visa U.S.A. took the lead in launching the Payment Card Industry (PCI) Data Security Standard Compliance Acceleration Program (CAP) in 2006. Now the campaign to boost data security is bearing fruit. PCI CAP uses incentives and fines to compel errant merchants to change lax security practices.

And in July 2007, Visa reported that 96% of the largest businesses accepting Visa bankcards confirm they no longer store sensitive account data, including security codes and PINs.

Michael E. Smith, Visa's Senior Vice President of Enterprise Risk and Compliance, said that by removing "prohibited data" from payment systems, businesses "are denying hackers the data they covet for use in counterfeiting payment cards and are thus making their businesses and the payments system more secure."

Acquirers reported to Visa the following levels of compliance with PCI CAP as of July:

Expanded scrutiny ahead

Visa's early compliance efforts focused on larger businesses. Recently, the company zeroed in on smaller businesses (level 4 merchants), as well as the acquirers and processors that service them. (See "Who's minding the small-business store, Visa wants to know," The Green Sheet, Aug. 13, 2007, issue 07:08:01.)

"Although some progress has been made among large merchants, it's clear that fraud will migrate to the weakest link," said Avivah Litan, Vice President and Distinguished Analyst for research firm Gartner Inc. "Any efforts by the industry to reinforce the system's armor, especially among small businesses, is a good approach," she said.

To this end, Visa has partnered with the National Federation of Independent Business to offer on the Web site educational materials, webinars and other online tools to help businesses achieve PCI compliance.

Additionally, the card Association has a list of comp-liant service providers online at

Notice to readers: These are archived articles. Contact names or information may be out of date. We regret any inconvenience.

previous next

Spotlight Innovators:

North American Bancard | USAePay | Board Studios