ITA Partnerships STAR Compliance
Technical Guideline #3 is an audit of PIN debit transactions within Automated Teller Machine (ATM) or Point of Sale (POS) environments. This audit guideline was developed by the American National Standards Institute (ANSI) to provide a minimum level of security in place with regards to management and handling of card holders' PINs in debit transactions as well as handling of cryptographic data used to protect such PINs. This audit is required to be completed every other year with the year ending in an even number. In 2008 the compliance audit is required.
Compliance with TG-3 audit means there needs to be clear and explicit procedures for any activity that involves use and handling of encryption Keys. These procedures need to address step by step actions that need to be taken by designated individuals to handle or process Keys. We will complete the audit and address the following requirements:
Key Management Team Roles and Responsibilities Key Lifecycle Phases Key Generation Key Storage Key Loading Key Distribution Key Destruction Key Compromise in ATMs using manual Key loading Storage of cryptographic devices and tools Handling of cryptographic devices and tools Monitoring cryptographic errors in cryptographic devices and ATMs Repair and retirement of cryptographic devices and ATMs Remote Key Loading Procedures Key Compromise in ATMs using remote Key loading technology
ITA Partnership has been trained and will assist your company in completion of this compliance requirement. We will perform the audit, prepare the necessary supporting detail and help you with the reporting requirements.
|
|