(Source: Business Wire)
Epicor Software Corporation (NASDAQ: EPIC), a leading provider of enterprise business software solutions to the midmarket and Global 1000 companies, today announced its Retail Software as a Service (SaaS) hosted solution has been awarded compliance status with the Payment Card Industry-Data Security Standard version 1.1 (PCI DSS). Customers and prospects can now find Epicor on the VISA Global List of PCI DSS Validated Service Providers.
The certification was achieved after an extensive independent audit of Epicor Retail's hosted infrastructure operations and processes conducted by Trustwave, a third-party qualified security assessor from the PCI Security Standards Council.
The PCI assessment process focuses solely on the security of cardholder data, whether Epicor has effectively implemented information security policies and processes, and if there are adequate security measures to comply with the requirements to protect cardholder data within the hosted environment. Additionally, the assessment reviewed whether Epicor is employing payment industry best-practices and provides recommendations for remediation of any non-compliant policies, processes, procedures, system configurations or vulnerabilities.
Security of cardholder data has become one of the biggest issues facing the payment card industry. The PCI DSS standard represents the best practices defined by the PCI Security Standards Council, covering 12 industry-wide requirements for security management, policies, procedures, network architecture, software design and other critical protective measures, that service providers must adhere to in order to safeguard sensitive data.
According to Mim Burt, research director in Gartner Retail Industry Advisory Services, "Over the past five years, the rise in the usage of cards for consumer payments has not surprisingly been accompanied by more attempted thefts of sensitive payment card data and related fraud." Burt recommends that retailers "Ensure that the technology providers supporting payment processors are compliant with industry standards."i
"Our validation as a certified PCI DSS compliant solution is a significant differentiator for Epicor Retail when it comes to securing business in a hosted environments," said David Henning, executive vice president and general manager for Epicor Retail. "We are the only provider that offers a complete solution with a full range of support services that leverages our extensive in-house expertise from development to deployment through training.
