Chase Paymentech Launches PCI Compliance Initiative for Level 4 Merchants


Leading Acquirer to Use AmbironTrustWave's Risk Profiler(SM) to Help Merchants Validate PCI DSS Compliance

CHICAGO and DALLAS, Aug. 31 / Chase Paymentech Solutions, LLC, a leading acquirer in the bankcard industry, has launched a data security compliance program targeted to small-to-medium sized merchants. According to the Payment Card Industry Data Security Standard (PCI DSS), merchants who process less than 20,000 e-commerce and/or one million card present transactions of a single card brand annually are classified as Level 4 merchants.

PCI DSS was introduced in 2004 and is endorsed by all the major card associations as the standard of due care for securing credit card information that is processed and/or transmitted by merchants and payment service providers. Merchant compliance requirements are segmented into four levels based on the number of transactions a merchant processes annually and the channel employed to accept those transactions. Compliance with PCI DSS is mandatory for all merchants.

Chase Paymentech will utilize AmbironTrustWave's Risk Profiler(SM) to help measure the degree of risk among a sampling of more than 18,000 of its Level 4 merchants. AmbironTrustWave's Risk Profiler is a web-based dynamic questionnaire that prompts merchants to answer questions about their acceptance channel, transaction volume and other parameters important in identifying risk. Once a merchant completes the questionnaire, a risk score is provided with recommended actions for the merchant to implement toward achieving PCI DSS compliance. The AmbironTrustWave Risk Profiler tool is supported by a robust, end-to-end communication platform that encourages merchants to take an active role in protecting cardholder information and their businesses.

AmbironTrustWave developed the Risk Profiler specifically to help acquirers manage PCI DSS compliance among their Level 4 merchant populations. While Level 4 merchants typically process the fewest number of credit card transactions, the risk to their customers' cardholder data is significant due to a lack of internal data security resources as well as a reliance on third-party technology, such as point-of-sale (POS) systems.

"Protecting credit card data is critically important for all merchants regardless of how many transactions they handle," said Michael L. Herman, Chief Compliance Officer at Chase Paymentech. "Our data has shown that smaller merchants are at risk of a data security breach as much, if not more so, than large, brand name merchants. It is in the best interests of consumers and merchants that we make every effort to ensure PCI DSS compliance across our entire portfolio."

"As PCI DSS compliance continues to gain momentum as a standard practice for conducting business in the payment industry, tools such as the Risk Profiler provide acquiring institutions with information they need to effectively drive PCI DSS compliance to their Level 4 merchants," added Robert J. McCullen, CEO of AmbironTrustWave. "We are pleased to be working with a market leader like Chase Paymentech to help their merchants protect cardholder information."

About Chase Paymentech Solutions

Chase Paymentech Solutions, LLC, headquartered in Dallas, Texas, is the nation's largest financial transaction processor for businesses accepting payments via traditional point of sale, hospitality, Internet, catalog and recurring billing. Chase Paymentech integrated companies processed approximately 15.5 billion transactions in 2005, with more than $560 billion in annual bankcard and debit volume in both the United States and Canada. Chase Paymentech's customer base includes more than 600,000 merchants with nearly 1 million locations across the United States and Canada. Chase Paymentech is a joint venture between JPMorgan Chase & Co. and First Data Corp. For more information, visit www.chasepaymentech.com/ .

About AmbironTrustWave

AmbironTrustWave is a leading provider of information security and compliance management solutions to Fortune 2000 businesses and the public sector. The company's flagship product, TrustKeeper®, provides data security and compliance services to more than 30,000 businesses throughout the world. The AmbironTrustWave Trusted Commerce(SM) program enables banks, merchants, service providers and software developers mitigate their risk by validating compliance with industry best practices for safeguarding information endorsed by American Express, Discover, MasterCard International, Visa International and Visa USA. AmbironTrustWave clients include financial organizations, global electronic exchanges, educational institutions and business services firms. The Company also provides services to several government agencies. AmbironTrustWave is headquartered in Chicago with offices throughout the United States and Europe. To learn more about AmbironTrustWave, visit www.atwcorp.com/ .

Source: AmbironTrustWave

CONTACT: Mike Petitti of AmbironTrustWave, +1-312-629-1111, ext. 24, mpetitti@atwcorp.com

Web site: www.atwcorp.com/
http://www.chasepaymentech.com/

All Topics