What is PCI-CPoC?
PCI-CPoC is a new security standard approved by the PCI Security Standards Council (PCI SSC) for smartphones or other contactless payment devices like wearables, tablets, etc. known as COTS (commercial off-the-shelf).
The PCI CPoC standard brings security and testing requirements for products that support contactless payments on a commercial COTS device using a built-in NFC reader.
Security Elements of a CPoC Solution
The PCI CPoC Standard is designed to help vendors develop solutions that protect the confidentiality and integrity of payment account data through a combination of the payment application on the COTS device and the back-end systems. This includes proactive monitoring and integrity checks to ensure the security of the solution is not compromised. The architecture of the CPoC module is based on three components as we can see below:
PCI - CPoC Certification Process
The certification process is similar to the one carried out for PCI-PTS. Once the product is validated under PCI CPoC Standard, will be listed on the PCI SSC website, where the buyers can find the solutions that have been developed and lab-tested to protect contactless payment data. Only PCI-recognized laboratories have the capacity and licenses necessary to test the product. .
PCI - CPoC Consulting
We are top notch consultants in PCI-CPoC,, we help you during the evaluation process in order to get your module validated as soon as possible, based on our experience and our recognition as valued consultants for laboratories.
Most steps of the process, like filling the Vendor Questionnaire and generating the additional required documents are not easy tasks if you are not used to. We smooth the process, working side by side with the client and the lab, allowing you to focus on your product, saving time, money and resources.
