Page 22 - GS190602
P. 22

NewProduct







                                                                       Company: Semafone
                                                                       Product: Cardprotect 4.0
                                                                       Website: www.semafone.com
                                                                       Contact: nasales@semafone.com


                       Reduce risk with PCI DSS-certified


                                        call center solution





                 emafone, a global provider of secure voice transactions with U.S.   rity," said Gary E. Barnett, CEO of
                 offices in Boston, released Cardprotect 4.0, a PA-DSS-compliant solu-  Semafone. "Obtaining this new PA-
                 tion designed to protect call centers from potential data breaches.   DSS certification [for Cardprotect]
        S Certified by the PCI Security Standards Council (PCI SSC), the solu-     enables us to provide an unmatched
        tion prevents unauthorized parties from "listening in" when payment card data   level of security and peace of mind
        is transmitted by phone, keeping payment card data out of scope, company   for our direct customers and part-
        representatives stated.                                                    ners."

        "Semafone has been PA-DSS certified since 2012, which demonstrates our con-  Cardprotect's advanced technology
        sistent commitment to achieving the highest possible standards in data secu-  can simplify PCI DSS compliance for
                                                                                   card-not-present environments, Bar-
                                                                                   nett noted. Its data capture method
                                                                                   uses dual tone multi frequency to
                                                                                   disguise key tones and shield card
                                                                                   data from call center agents during
                                                                                   calls and live chat sessions. It also
                                                                                   uses historic call recording redaction
                                                                                   to remove data from recordings.

                                                                                   Rigorous security standards
                                                                                   Barnett pointed out that Semafone
                                                                                   has achieved four security and pay-
                                                                                   ment accreditations. The company is
                                                                                   a PCI DSS Level 1 Service Provider
                                                                                   and Visa Level 1 Merchant

                                                                                   Agent and is ISO 27001:2013 compli-
                                                                                   ant. Its Cardprotect processing ap-
                                                                                   plication is PA-DSS certified.
                                                                                   Cardprotect was built to PA-DSS
                                                                                   specifications, Barnett explained,
                                                                                   which require specific development
                                                                                   and auditing procedures, a formal
                                                                                   assessment by a Qualified Security
                                                                                   Assessor (PA-QSA) and validation
                                                                                   by the PCI SSC assessor quality
                                                                                   management team.

                                                                                   "PA-DSS certification is a require-
                                                                                   ment for any maker, developer and
                                                                                   integrator of payment applications



        22
   17   18   19   20   21   22   23   24   25   26   27