Connect with us

E-Financial

Banks Race to Comply with PCI DSS Version 3

Published

on

cbn-logo_500.jpg
Kindly share this post

Few months after money deposit banks in the country completed certification of Payment Card Industry Data Security Standards (PCI DSS) version 2, they are now faced with new task of complying with the next upgrade which is version 3.

PCIDSS is a framework for ensuring that critical information assets are protected from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.

The major global payment brands require that every entity including financial institutions as well as merchants and service providers store, process, or transmit payment card data, in every channel including catalogue and online retailers as well as brick-and-mortar businesses — must be in compliance with the PCI Data Security Standard (PCI DSS).

Nigeria CommunicationsWeek investigations revealed that PCI DSS version 2 the one Central Bank of Nigeria (CBN) mandated banks to comply with by November 30, 2014, ended in December last year, and version 3 was released in January this year.

Some Nigerian banks have already commenced efforts towards compliance to this new version.

Oluseyi Akindeinde, chief technical officer, Digital Encode, a company that assist banks and other organizations to achieve PCI DSS certification, said, PCI DSS Version 3.0 is just an update to the already existing PCI DSS version 2.

“It was brought about by the ever evolving and changing sphere of information security. It has updated a few of the objectives and added new controls in line with the current landscape of payment systems threats and risks. There are quite a number of advantages. One now is that it makes application security testing a very key component of the overall process. Other key advantages include systems component inventory, third party and vendor relationships, advanced persistent threats and malware as well as physical access and point of sale security,” he stated.

He added that, it will be highly beneficial for all banks to get certified to this new standard.

“The PCI certification audit is a yearly process and as such it only makes sense to make adjustments where needed as it relates to the new version,” he said.

Ahmed Adesanya, IT Security and Connectivity consultant, said that version 3 compliance extends to merchants, payment application providers, communications service providers as well as cloud service providers.

He said that the new version has 12 requirements and over 200 control processes.

“Banks need to show a report of compliance, covering all the processes of security control that applied to them. If any bank doesn’t meet up with this version 3 compliance, payment card brands such as Visa and MasterCard will sanction such bank,” he noted.

He added that such sanctions include fine of $450 per card bridge recorded by the bank that did not comply to this version 3.

He pointed out that the tedious process of compliance to PCI DSS has led to some banks to outsource some of the process to cloud services providers that have met the requirement.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Financial

CBN Waives 2025 Licence Renewal Fee for Bureaux de Change Operators

Published

on

Kindly share this post

Central Bank of Nigeria (CBN) has waived the 2025 licence renewal fee for all bureaux de change (BDC) operators.

CBN Waives 2025 Licence Renewal Fee for Bureaux de Change Operators

Jonah Onojah, director of the financial policy and regulation department, announced that the waiver took immediate effect.

“This is to inform all existing bureaux de change that further to the Regulatory and Supervisory Guidelines for Bureau De Change Operations in Nigeria, 2024, and the ongoing transition to the new BDC regulatory structure, the Central Bank of Nigeria (CBN) has approved the waiver of 2025 licence renewal fee, effective immediately,” the statement reads.

“Any bureau de change that has paid for 2025 licence renewal is hereby advised to apply to the Director, Financial Policy and Regulation Department, Central Bank of Nigeria for refund to its account from which the payment emanated.

“The CBN remains committed to fostering stability, transparency, and efficiency in the foreign exchange market while ensuring that operators align with the revised regulatory framework,” the statement said.

On May 22, 2024, CBN approved new guidelines for BDC operations to improve compliance and oversight.

In the guideline, CBN said all existing BDCs are to re-apply for a new licence according to any of the tiers or licence categories of their choice.

CBN said the guidelines are part of its efforts to re-position the BDC market to play its envisioned role in the foreign exchange market in Nigeria.


Kindly share this post
Continue Reading

E-Financial

PalmPay is not a Loan App, says MD

Published

on

L-r: Femi Hanson, Head, Marketing and Communications, PalmPay; Chika Nwosu, Managing Director, and Donald Ubeh, Head, Risk and Compliance, MLRO at PalmPay's media roundtable discussing 2025 fintech forecast
Kindly share this post

PalmPay, a Mobile Money Operator and digital payment platform has reaffirmed its role as a mobile payment provider, correcting the insinuation that it is a loan App.

Chika Nwosu, Chief Executive Officer, PalmPay, speaking at a press conference in Lagos clarified that PalmPay’s core mission is to provide seamless payment solutions and financial services, not to issue loans.

This clarification became necessary against erroneous messages in some social media platforms that the PalmPay is a loan App, as well as individuals wearing PalmPay-branded clothing allegedly been involved in arresting loan defaulters, raising concerns about the company’s role in debt recovery practices.

He explained that all lending activities on its platform are conducted by third-party financial institutions leveraging its ecosystem, not PalmPay itself.

“PalmPay is not a loan App. We provide a platform for third-party financial institutions to offer their services, including loans, to our users. These institutions operate independently and comply with all regulatory requirements,” Nwosu explained.

More so, Chika Nwosu identified smartphone penetration, internet connectivity and innovative technologies as key factors that are crucial to increased access to mobile money services in Nigeria.

According to him, with smartphone penetration projected to reach 65% by 2026 as well as improved internet infrastructure, more Nigerians will be enabled to access mobile money services.

He disclosed that, with fintech companies such as PalmPay evolving through digital wallets and seamless payment gateways, accessibility to mobile money service was bound to expand soon.

He emphasized that with demand for affordability of financial services growing, more opportunities would be unlocked for PalmPay in the nearest future.

“From under 10,000 agents in 2015 to over 1.5 million agents in 2023, agent networks have become the backbone of mobile money operations in Nigeria. For this reason, we are more likely to see a sharp increase in the number of mobile money agents and merchants. Apart from that, MMOs will increasingly use artificial intelligence to improve customer experiences, such as machine learning, predictive analytics, and fraud detection,” he said.

Donald Ubeh, Head, Risk and Compliance, MLRO at PalmPay, while highlighting the impact of fintech companies such as PalmPay, explained that the coming of PalmPay has led to economic empowerment particularly for individual users and several Small and Medium Scale enterprises.

He noted that many Nigerians including bank customers have migrated their funds to PalmPay owing to convenience and accessibility it provides.

He added that mobile money operators were conceived with the aim of driving financial inclusion for the underserved and unbanked population.

According to EFInA, increasing adoption of fintech companies by Nigerians has led to increase in financial inclusion rate by 13% in 13 years.


Kindly share this post
Continue Reading

E-Financial

Moniepoint MFB Says Rumours of N1.1Bn Theft by Hackers Malicious

Published

on

Kindly share this post

Moneipoint has denied reports that Moniepoint MFB, its microfinance bank, was hacked and some N1.1 billion allegedly stolen.

Moniepoint MFB Says Rumours of  N1.1Bn Theft by Hackers Malicious

Moniepoint, in a blog post said that the report, which began on social media was malicious and misleading and should be ignored.

According to the company, the alleged theft gained traction on social media, alleging that the company is facing operational challenges due to the hack.

“We categorically state that these claims are untrue, and we urge the public to disregard them in their entirety.

Moniepoint MFB has always maintained the highest standards for digital security and customer fund protection.

It stated that as a duly authorised and licensed financial institution, customer deposits with Moniepoint MFB are insured by Nigeria Deposit Insurance Corporation (NDIC), with the Central Bank of Nigeria (CBN) supervising and regulating its operations to ensure adherence to all applicable standards.

 

 

 

 


Kindly share this post
Continue Reading

Trending