Heightened Web Standards Lift Tulsa E-Security Firm

Article excerpt

Meeting heightened e-merchant security demands could double the size of True Digital Security Inc. over the next year.

Earlier this month the Payment Card Industry Security Standards Council, which sets Web security standards for credit card operations, updated requirements for Internet retailers handling consumer credit card data.

"Security's one of those things that's often looked at as insurance," said Jerry Dawkins, president of Tulsa-based True Digital Security. "It's hard to show a return on investment."

But that now becomes a more sensitive issue since these new requirements, which first took effect July 1, broaden the focus of data system reviews from entry log-in pages to a variety of internal Web site modules dealing with credit information.

That effectively increases the number of third-party vulnerability scans e-retailers must perform to test or verify background activity, said Director of Operations Dominic Schultz. Failure to meet those Web site reviews could result in fines of up to $500,000 or loss of credit card services.

That not only puts more pressure on businesses to comply with the standards, but spurred the sellers to make similar demands of their suppliers and vendors, said Director of Management Security Systems Brett Edgar.

Such moves create opportunities for True Digital, since the Tulsa network security services provider is now one of only some 120 firms to achieve Approved Scanning Vendor certification, Edgar said. …