How Expired Terminals Affect Your PCI Compliance
When seeking Payment Card Industry (PCI) compliance, the expiration of terminals can introduce complexities and uncertainties for merchants. In this video, Sully Perella, a practice leader at Schellman, sheds light on the significance of expired terminals and offers insights into navigating this compliance challenge.
Typically identified through an approved PIN Transaction Security (PTS) listing, terminals undergo rigorous testing and are assigned expiration dates based on testing timelines and control parameters. Those that do expire can pose various implications for PCI compliance—if a terminal's listing has expired, merchants must engage with their acquiring bank to assess its impact on PCI compliance.
However, there's a silver lining for merchants utilizing terminals as part of a Point-to-Point Encryption (P2PE) solution—if an expired terminal is integral to an active P2PE solution, there's a grace period for continued usage.
Navigating PCI compliance can be daunting, especially where terminal details like manufacturer, hardware, and software versions are concerned and we encourage merchants to reach out to us for guidance. With our expert guidance and proactive measures, merchants can ensure adherence to PCI standards while leveraging the benefits of secure payment processing solutions.
About Schellman
Schellman is a leading provider of attestation and compliance services. We are the only company in the world that is a CPA firm, a globally licensed PCI Qualified Security Assessor, an ISO Certification Body, HITRUST CSF Assessor, a FedRAMP 3PAO, and most recently, an APEC Accountability Agent. Renowned for expertise tempered by practical experience, Schellman's professionals provide superior client service balanced by steadfast independence. Our approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives through a single third-party assessor.