Digital Encode, an indigenous security consulting and integration firm has helped eTranzact attain the Payment Card Industry Data Security Standard (PCI DSS) certification.
PCI DSS is an information security standard for organisations that handle cardholder information for the major debit, credit, prepaid, e-purse, Automated Teller Machines and Point of Sale cards.
Adewale Obadare, chief operating officer, Digital Encode said the PCI DSS is a regulatory requirement to ensure operators put in place the required level of security for a robust e-Payment system for them to be insulated from fraud.
He explained that Digital Encode in collaboration with Control Case, a United States based qualified security assessor helped eTranzact scale through administrative, physical and technical hurdles ahead of the PCI DSS certification.
He said Control Case, which was the external auditor, meticulously examined eTranzact’s system and hardware infrastructure to ensure that they meet the highest security levels. This, according to him, will help eTranzact avoid data and card security compromise and boost customers’ confidence.
Explaining his company’s role in the certification process, Obadare said, “Digital Encode was responsible for providing lead advisory role, remediation implementation and certification strategy. The significance of this feat is that digital encode has demonstrated superior expertise and experience in delivering PCI DSS certification projects in Nigeria.”
“Being PCI DSS compliant means that eTranzact now has a reasonable assurance that risk management processes around cardholders’ data protection are robust and safe. This is an indication that all payments and card transactions sent through eTranzact network met the highest possible standards for data security,” he added.
Oluseyi Akindeinde, chief technical officer Digital Encode speaking in the same vein said the Central Bank of Nigeria’s cash-less economic policy had stimulated a beehive of payment activities in the country via multiple electronic channels such as Point of Sale terminals, web and mobile, among others.
This, he said, also led to the emergence of a lot of information and security concerns that required operators to be PCI DSS compliant in order to give the public the assurance that transactions via their networks are safe.
Akindeinde said it was important for all stakeholders involved in the cash-less scheme to adhere to PCI DSS compliance, which consist of maintaining a secure network for processing transactions; protection of cardholders and transaction data while in transit or at rest on the network; regular monitoring and testing of Information Technology infrastructure, among others.
According to him, Digital Encode provides advisory services toward improvements in information security.
“We have an effective and successful methodology for achieving PCI DSS compliance,” he said.