ITA Partnership, LLC

Connecting technology to business

HOME

STAR Compliance

ABOUT US

INDUSTRIES

SERVICES

IT AUDIT

IT REGULATORY COMPLIANCE

CAREER OPPORTUNITIES

CONTACT US

ITA Partnership’s STAR Compliance


Technical Guideline #3 is an audit of PIN debit transactions within Automated Teller Machine (ATM) or Point of Sale (POS) environments.    This audit guideline was developed by the American National Standards Institute (ANSI) to provide a minimum level of security in place with regards to management and handling of card holders' PINs in debit transactions as well as handling of cryptographic data used to protect such PINs.   This audit is required to be completed every other year with the year ending in an even number.  In 2008 the compliance audit is required.

Compliance with TG-3 audit means there needs to be clear and explicit procedures for any activity that involves use and handling of encryption Keys. These procedures need to address step by step actions that need to be taken by designated individuals to handle or process Keys. We will complete the audit and address the following requirements:


• Key Management Team Roles and Responsibilities
• Key Lifecycle Phases
• Key Generation
• Key Storage
• Key Loading
• Key Distribution
• Key Destruction
• Key Compromise in ATMs using manual Key loading
• Storage of cryptographic devices and tools
• Handling of cryptographic devices and tools
• Monitoring cryptographic errors in cryptographic devices and ATMs
• Repair and retirement of cryptographic devices and ATMs
• Remote Key Loading Procedures
• Key Compromise in ATMs using remote Key loading technology

ITA Partnership has been trained and will assist your company in completion of this compliance requirement.  We will perform the audit, prepare the necessary supporting detail and help you with the reporting requirements.





Active Members of ISACA and IIA 

ITA Partnership, LLC. | P.O. Box 1295,  Medford, NJ  08055 |  Phone: 609-339-6889


Copyright © 2008 ITA Partnership, LLC. All Rights Reserved. Designated trademarks and brands are the property of their respective owners.