Visa to help merchants comply with new e-security

From...

By Maria Trombly

(IDG) -- Visa U.S.A. Inc. last week said it and the banks that issue credit cards under its name are launching a program to help online retailers and other Internet-based merchants comply with a set of security guidelines due to take effect in May.

Online retailers are required to take steps such as installing firewalls, encrypting stored data and using antivirus software under the new guidelines, which were detailed last year. Foster City, Calif.-based Visa announced on Wednesday that it will offer training sessions, interactive reviews and consulting on compliance and monitoring, in addition to handing out information on third-party firms that specialize in security testing.

MESSAGE BOARD Security on the Net   IDG.net INFOCENTER Computerworld main page Free daily newsletters Visit an IDG site Choose a site: IDG.net CIO Computerworld Darwin Dummies.com GamePro.com The Industry Standard ITWorld.com InfoWorld.com JavaWorld LinuxWorld Macworld Online Network World Fusion PC World Publish.com SunWorld IDG.net search

An Internet-based training program should be rolled out to the company's member banks within the next two weeks, said a Visa U.S.A. spokeswoman. The banks will then provide their merchant clients with access to the training, which is being developed as part of Visa's Cardholder Information Security Program (CISP) initiative.

John Shaughnessy, senior vice president of risk management at Visa, said in a statement that the CISP effort is aimed at giving shoppers using the Internet "the same security online that they have come to expect in the physical world." He described the requirements developed by Visa as "a virtual deadbolt."

The new guidelines also require the top 100 e-commerce merchants based on their Visa transaction volumes to have their online security procedures evaluated by an outside accounting or Internet security firm. Other online retailers will be subject to random security reviews by Visa, the company's spokeswoman said.

Hackers tap credit card info at Bibliofind
March 5, 2001
Hackers deemed terrorists under new U.K. law
February 20, 2001
Network Solutions selling database info
February 19, 2001
Fix for DNS software hole released
January 29, 2001
Hackers hit U.S., U.K., Australian government sites
January 22, 2001
Malaysian hackers may face indefinite detention
January 10, 2001

Web site upgrades leave some customer data vulnerable
(Computerworld)
Europe takes action on cross-border credit-card fraud
(IDG.net)
Banks announce release of Visa 'smart' cards
(Computerworld)
American Express offers disposable credit card numbers for online shopping
(Computerworld)
Europeans still wary of online card payments
(IDG.net)
Credit-card numbers exposed in extortion attempt
(Computerworld)
Discover to offer single-use credit cards
(Computerworld)
EU-wide credit card fraud soars 50% in 2000
(The Industry Standard)

Visa U.S.A. Inc. press release
Visa U.S.A. Inc.

Note: Pages will open in a new browser window

External sites are not endorsed by CNN Interactive.