IT News & Technology update

John Lewis speaks out against PCI standard

In PCI DSS (for short payment card industry data security standard) is a set of rules and guidelines designed to protect the consumer and merchant against fraud. You will provide the traders with credit card info, it is important that it remain safe from attackers and hackers. UK based department store John Lewis agreed that the PCI DSS is necessary and wants to be respected, but must speak against unnecessary how difficult the whole process can be.

In 2009 John Lewis plans to be in full compliance with the PCI DSS standards. There are literally dozens of requirements to be met, and they are on issues such as data encryption, data storage and management of data.

Frank Cordrey, head of development support, with John Lewis comments: "The goalposts of the PCI standard has been moved several times. It was quite consistent and objectives are clear at first, but there are several areas that have changed significantly in the past several years. There are times when you need rules to be static for some time to catch up and take things forward. What I would like to see someone acceptance of the fact that this is a big task, and that if want people to adhere to the rules and specifications must be maintained."

The total number of companies that are part of security standards PCI Board amounted to 460, and John Lewis is one of those companies. If they are upset now, wait until October when a new version of the PCI standard goes.

Many of the UK-based business, are not compatible with the standard, banks are sure to react in a tough manner. It is also considered to ensure that companies comply with the PCI standard, significant sums of money will be spent.

Etienne Greeff director of public comments: "As the PCI DSS has been delayed so many companies and the UK are so far as behind is massive backlog of companies that need help to achieve compliance. PCI compliance is one of our top two themes for 2008. It is true there are no financial penalties, but it is incorrect to say, is not an incentive for traders to comply. Banks are already'll traders and imposing sanctions if there is a breach. They are doing it with two and a retailer first and after they reduce the risk and they will go to the next level down."

No Comment | Posted in » News, PCI DSS, security, Technology