The Word "Secure"

The Green Sheet is a well-known and respected publication serving the financial industry; consequently, I believe, you need to be careful when using words like "secure" when describing products and services
[See "Merchants Draw a Card for Fast, Secure Transactions," New Products, The Green Sheet, July 25, 2005, issue 05:07:02].

The card Associations have clearly defined what is required of vendors to deliver a "secure" application or provide a "secure" service. These definitions are available on the Associations' Web sites and from security vendors.

The standard for service providers is now called Payment Card Industry (PCI) [Data Security Standard] and the standard for software products is called Payment Application Best Practices (PABP).

TPI Software takes security very seriously and has gone to great expense in terms of time and money to ensure that our products meet the card Associations' rigorous security requirements.

In fact, TPI's SmartPayments software products were one of the first software products to be PABP-certified. The Green Sheet describes the "new product" as "secure" in the title, yet this product is not listed as a certified application, and no mention of the card Association security standards are made in the article.

Given the importance of security in our industry and the fact that the Associations have now clearly defined what is expected from vendors serving this industry, I think publications like The Green Sheet should establish industry standards when describing products and services.

They should, when applicable, indicate if the product or service has been certified, and should only say a product is "secure" if it has been "certified" according to the Association requirements.

I would even go so far as to say that the statement "we are in the process of getting certification" should be treated as NO, they are not certified, since some companies have been "in the process of getting certified" for as long as they have been in existence.

Bill Pittman, President
TPI Software LLC

Where to Turn?

I have a client that recently changed over to us from another company. He had seven months left on his three-year contract. My client called the company before he was set up (or signed paperwork) and asked what the buyout would be, and he was told it was $250; instead they took $7,000. Of course, the company never contacted my client; it just took the money and said he can get it back by signing another three-year agreement! Where can we go with this?

D. P.
Heartland Payment Systems Inc.

D.P.:

I suggest that your client contact an attorney. Otherwise, his choices are to file a complaint with the Attorney General, the Federal Trade Commission and/or the Better Business Bureau.

Editor