{"id":3430,"date":"2021-06-16T23:33:00","date_gmt":"2021-06-16T21:33:00","guid":{"rendered":"https:\/\/webdev.atsec.us\/?p=3430"},"modified":"2024-08-19T21:31:07","modified_gmt":"2024-08-19T19:31:07","slug":"atsec-china-adds-pci-cpsa-logical-and-physical-assessor-qualifications","status":"publish","type":"post","link":"https:\/\/webdev.atsec.us\/atsec-china-adds-pci-cpsa-logical-and-physical-assessor-qualifications\/","title":{"rendered":"atsec China adds PCI CPSA (Logical and Physical) Assessor Qualifications"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"443\" height=\"304\" src=\"https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/lock.jpg\" alt=\"\" class=\"wp-image-3431\" style=\"width:740px;height:auto\" srcset=\"https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/lock.jpg 443w, https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/lock-300x206.jpg 300w\" sizes=\"(max-width: 443px) 100vw, 443px\" \/><\/figure>\n\n\n\n<p><a href=\"https:\/\/www.atsec.cn\/\" target=\"_blank\" rel=\"noreferrer noopener\">atsec China<\/a> has been qualified by PCI SSC (Payment Card Industry Security Standards Council) as a Card Production Security Assessor (CPSA) Company to validate an entity&#8217;s adherence to the PCI Card Production and Provisioning Logical Security and&nbsp; Physical Security Requirements (two separate security standards). Currently atsec provides the PCI Card Production Logical Security and Physical Security Standards assessment services in the CEMEA, Canada, Europe, LAC, USA and Asia Pacific markets.<\/p>\n\n\n\n<p>The development, manufacture, transport, and personalization of payment cards and their components have a strong impact on the security structures of the payment systems, issuers, and vendors involved in their issuance. Data security is the primary focus of the standards.<\/p>\n\n\n\n<p>The PCI Card Production and Provisioning Logical Security Requirements (\u201cPCI Card Production Logical Security Standard\u201d) addresses the logical security controls associated with card production and provisioning such as:<\/p>\n\n\n\n<ul>\n<li>\u00a0EMV data preparation<\/li>\n\n\n\n<li>\u00a0Pre-personalization<\/li>\n\n\n\n<li>\u00a0Card embossing<\/li>\n\n\n\n<li>\u00a0IC and magnetic-stripe personalization<\/li>\n\n\n\n<li>\u00a0PIN generation<\/li>\n\n\n\n<li>\u00a0PIN mailers<\/li>\n\n\n\n<li>\u00a0Card carriers<\/li>\n\n\n\n<li>\u00a0Distribution\u00a0<\/li>\n<\/ul>\n\n\n\n<p>PCI Card Production and Provisioning Physical Security Requirements (\u201cPCI Card Production Physical Security Standard\u201d) define a comprehensive source of information for entities involved in card production and provisioning, which may include manufacturers, personalizers, pre-personalizers, chip embedders, data-preparation, and fulfillment. The standard specifies the physical security requirements and procedures that entities must follow before, during, and after the following processes:<\/p>\n\n\n\n<ul>\n<li>Card Manufacturing<\/li>\n\n\n\n<li>Chip embedding<\/li>\n\n\n\n<li>Personalization<\/li>\n\n\n\n<li>Storage<\/li>\n\n\n\n<li>Packaging<\/li>\n\n\n\n<li>Mailing<\/li>\n\n\n\n<li>Shipping or delivery<\/li>\n\n\n\n<li>Fulfillment<\/li>\n<\/ul>\n\n\n\n<p>In addition to the card production activities above, the two standards describe the logical and physical security requirements for entities that:<\/p>\n\n\n\n<ul>\n<li>Perform cloud-based or secure element (SE) provisioning services;<\/li>\n\n\n\n<li>Manage over-the-air (OTA) personalization, lifecycle management, and preparation of personalization data;<\/li>\n\n\n\n<li>Manage associated cryptographic keys.<\/li>\n<\/ul>\n\n\n\n<p>atsec\u2019s CPSA assessors can work with you to confirm the assessment scope, perform the assessment on-site, complete PCI Card Production ROC (Report on Compliance) and AOC (Attestation of Compliance), submit them to applicable payment brands or cooperative entities, and re-validation can be further performed where applicable.<br><br>In addition to the assessment service, atsec offers a full range of consulting services to support your organization in achieving compliance with the PCI Card Production Logical and\/or Physical Security Standards. atsec consultants have experience in each of the requirement areas (e.g. data security, network security, system security hardening and management, user management, key management, PIN distribution, personal security management, premises security protection, production procedures security control, security audit, secure packaging and delivery), and can help you develop appropriate measures in order to achieve your compliance.<br><br>The CPSA Assessors list can be found on the <a href=\"https:\/\/www.pcisecuritystandards.org\/assessors_and_solutions\/card_production_security_assessors\" target=\"_blank\" rel=\"noreferrer noopener\">official website of PCI SSC<\/a>, and atsec\u2019s qualification is shown below:&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"578\" height=\"61\" src=\"https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/accred.png\" alt=\"\" class=\"wp-image-3432\" style=\"width:740px;height:auto\" srcset=\"https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/accred.png 578w, https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/accred-300x32.png 300w\" sizes=\"(max-width: 578px) 100vw, 578px\" \/><\/figure>\n\n\n\n<p>In addition to CPSA assessor, as an accredited PCI QSA, ASV, QPA, PA QSA, P2PE, 3DS assessor, SSF assessor and PFI, atsec offers a full range of services to support organizations in achieving PCI compliance.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>atsec China has been qualified by PCI SSC (Payment Card Industry Security Standards Council) as a Card Production Security Assessor (CPSA) Company to validate an entity&#8217;s adherence to the PCI Card Production and Provisioning Logical Security and&nbsp; Physical Security Requirements (two separate security standards). Currently atsec provides the PCI Card Production Logical Security and Physical [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[7,13],"tags":[],"_links":{"self":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/posts\/3430"}],"collection":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/comments?post=3430"}],"version-history":[{"count":1,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/posts\/3430\/revisions"}],"predecessor-version":[{"id":3433,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/posts\/3430\/revisions\/3433"}],"wp:attachment":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/media?parent=3430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/categories?post=3430"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/tags?post=3430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}