By using the E3 wedge, the POS is no longer in the scope of PA-DSS validation, and although the merchant’s PCI-DSS scope is greatly reduced, some PCI-DSS requirements still need to be addressed. According to Coalfire, “PCI compliance will always apply to a merchant if they capture, process or store credit card data anywhere in their physical environment.” Please reference page 10 of Coalfire’s whitepaper on the wedge for the PCI requirement breakdown with E3.

Also, although some PCI requirements remain with E3, all E3-users are protected by Heartland’s E3 warranty that states in the unlikely event of a data breach while using E3, Heartland will reimburse a merchant’s breach-related fines.

Please let us know if you have further questions,

Larry

Thanks.

Here at Heartland, we are eager to see the upcoming PCI Security Council guidelines/report, and we hope the Council will embrace end-to-end encryption technology as a new and effective security method available to merchants for protecting cardholder data.

In this time of mounting cyber crimes, the best way for businesses to ensure they are fully secure and protected is by implementing new technologies that can combat the hackers and fraudsters, such as tamper-resistant hardware and end-to-end encryption solutions – like Heartland’s E3 – which has the capability to encrypt the card data at the time of swipe or key entry.

As hackers become increasingly sophisticated, businesses also need to improve their methods and lines of defense – beyond PCI compliance standards.

thanks Anne
1-800-204-4800

The payment application system/Internet device is not connected to any other systems within your environment;

I think that is overlooked.