CardSystems Meets Data Security Compliance Deadline

ATLANTA – CardSystems today announced that AmbironTrustWave, an independent data security assessment firm, submitted on CardSystems’ behalf, a Report on Compliance (ROC) to MasterCard, Visa, American Express and Discover on August 31st, 2005, as previously promised.

The ROC is a summary of findings resulting from a Payment Card Industry (PCI) Data Security Standard audit. The report details the security protocols of a company’s network environment that processes and/or transmits credit card data. The ROC is submitted to credit card associations for validation of compliance with the PCI standard. CardSystems retained AmbironTrustWave in July 2005 to perform a PCI audit and submit a ROC by August 31, 2005.

“In performing its assessment, AmbironTrustWave scrutinized every aspect of our operations,” said John Perry, President and CEO of CardSystems. “AmbironTrustWave audited the security of our network, the steps that our 110 employees take to safeguard cardholder data, our vulnerability management program, our information security policy and our ability to regularly monitor and test our network.”

CardSystems has implemented a fully encrypted processing network for both data transmission and storage. Additionally, by segmenting its network with a series of internal and external firewalls on its system, CardSystems’ infrastructure is segregated to ensure that only appropriate communications occur. As a result, CardSystems is confident that its 119,000 merchants are being served by one of the most secure payment processing systems in the industry.

“We believe that the Report on Compliance concludes that CardSystems meets the PCI standard. We are hopeful that MasterCard, Visa, American Express and Discover will accept this PCI report and validate that CardSystems is PCI compliant,” said Perry. “The data security protocols currently in place at CardSystems make it one of the data security leaders among payment processors in the payment card industry.”