Visaâs PABP applies to software vendors who develop payment applications that store, process, or transmit cardholder data as part of authorization or settlement. The annual on-site security review consists of 14 PABP requirements, including protection of card holder data, secure passwords, protection of wireless transmissions, encryption of sensitive traffic over public networks and more. MSI successfully demonstrated its compliance by submitting to this rigorous review of its CC Direct payment application with WinPM version 2.0, as required by Visa and the Payment Card Industry Data Security Standard (PCI DSS).
CC Direct captures credit card data via multiple points of entryâincluding credit card numbers from interface pointsâand stores them securely. A token is used by the software to access the credit card data appropriately for processing, based on security roles. Since 1996, MSIâs unique approach in providing the credit card software integrated with property management has given MSI customers a more intuitive method for credit card processing. The license fee associated with the initial purchase allows the site unlimited ability to process transactions, without incurring per-transaction fees associated with the property management system.
âOffering a migration path to compliant software without forcing the hotel to incur additional license fees was an important factor in MSIâs decision to rewrite the credit card processing program that is used by MSIâs customers,â commented Tim Tiller, MSW, President of MSI. âWeâve created a PABP-compliant solution that will ensure the safety of credit card transactions for all of our customers, while also giving them a direct connection to their credit card processor using software supplied by MSI, reducing additional costs.â
âValidating compliance with PABP demonstrates to MSIâs customers that cardholder security is at the forefront of their business requirements for the technologies they bring to market,â says Robert J. McCullen, chairman and CEO of Trustwave. âAt a time when consumers are becoming more aware of the risk in sharing their personal information with the organizations they patronize, MSI is helping merchants secure transactions for consumers staying at properties that use MSIâs payment application.â