News from the Wire

EMVCo now an accredited ISO/IEC certification body

Wednesday, December 18, 2024 — 13:42:49 (EST)

Foster City, Calif., Dec. 18, 2024—EMVCo, the global technical body for the payment community, has received ISO/IEC 17065 accreditation for its security evaluation processes. Its new status as an accredited certification body recognises the value and quality of EMVCo security product evaluations in enabling the deployment of safe and secure payment solutions.

EMVCo Security Evaluations provide a common methodology to assess whether chip and software-based mobile payment products and solutions meet EMV® Specifications, requirements and guidelines for security*. Where applicable, this includes mechanisms and protections to reach a ‘High’ level of resistance as defined in JIL Application of Attack Potential to Smart Cards (JIL AP) to withstand known attacks.

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) have defined in ISO/IEC 17065 a set of requirements for certification bodies to demonstrate that they deliver evaluation processes in a competent, consistent and impartial manner. This accreditation independently acknowledges that EMVCo’s security certification scheme meets these stringent requirements and facilitates the recognition of EMVCo and EMVCo-evaluated products on a national and international basis.

“As we move to an increasingly digitalised world, cross-industry efforts must focus on bolstering cybersecurity and ensuring products and services coming to market are fit for purpose,” explains Aaron Armstrong, EMVCo Executive Committee Chair. “For almost 20 years, EMVCo’s robust security evaluation processes have been integral in promoting trust and enabling more secure payment experiences. We felt it was vital to independently showcase the depth, quality and impartiality of this testing framework, and demonstrate our proven ability to address payment cybersecurity concerns in support of regulatory initiatives across the world.”

EMVCo was established in 1999 and collaborates with industry stakeholders to develop technical specifications and programmes that any party can use to design payment products that will work seamlessly and securely worldwide. Its mission is to facilitate the worldwide interoperability of secure payment transactions by developing and publishing the EMV Specifications and their related testing processes.

All evaluated products are listed on the EMVCo website.

– ENDS –

For further EMVCo media information please contact David Amos / Alice Fairless – Tel: +44 113 3501922 or email: david@iseepr.co.uk / alice.f@iseepr.co.uk

Click here to read our privacy policy.

Notes to Editors:

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

*EMVCo Security Evaluations cover the following technologies:

Integrated Circuit (IC) – includes the firmware and software routines required to access the security functions of the IC.

Platform (IC + OS) – includes the IC hardware with its dedicated software, operating system, run-time environment and platform environment on which one or more applications can be executed. Integrated Circuit Card (IC + OS + App) – includes the IC, the operating system and the payment applications that reside on the ICC.

EMVCo Software-Based Mobile Payment (SBMP) – defines generic security requirements for software-based mobile applications and the relevant interfaces involved in payment transactions. About EMVCo:

EMVCo creates and manages EMV Specifications and programmes that enable seamless and secure card-based payments for businesses and consumers worldwide.

EMV Specifications support technologies including EMV Chip Contact, EMV Chip Contactless, Mobile, QR Code, Secure Remote Commerce (SRC), 3-D Secure (3DS) and Payment Tokenisation and are widely used by the payments industry to develop products and services that deliver trusted and convenient in-store, online and remote card-based payments.

As a global technical body, EMVCo is collectively owned by American Express, Discover, JCB, Mastercard, UnionPay and Visa. Hundreds of payments stakeholders, including merchants, banks and technology providers, participate as EMVCo Associates and Subscribers to develop, evolve and enhance flexible EMV Specifications that support innovation and address marketplace needs. All EMV Specifications are available royalty free on the EMVCo website.

The Green Sheet Inc. is now a proud affiliate of Bankcard Life, a premier community that provides industry-leading training and resources for payment professionals. Click here for more information: bankcardlife.com?orid=33533&opid=1 .

Source: Company press release.