Blog | September 29, 2014

7 Steps To EMV Compliance

By The Business Solutions Network

Data Security

While at the Fall ONE Ingram Micro conference in Las Vegas Jeff Yelton, executive director and GM DC/POS for the distributor, gave a presentation on electronic payments and EMV. I wrote a little about it in last Thursday’s blog. One thing I didn’t detail was Yelton’s seven steps to EMV compliance. Without further ado, here they are, short, concise, and to the point…

  1. Meet with your customers. “Make them understand that EMV is a business issue that will have a profound effect on their financials as well as operations,” says Yelton. “They need a budget and a technical migration plan. You stand to lose a lot of credibility with your customers if you aren’t talking to them about EMV.”
  2. Select EMV-compliant hardware (e.g. PIN pad). This shouldn’t be a problem in the U.S., but you do need to decide if you’re going with chip and PIN or chip and signature solutions.
  3. Choose an EMV-compliant processor (shouldn’t be a big issue in the U.S.) and ensure your ISV partners have updated/certified transaction brokers (the code that connects all the payments stuff together in a POS solution)
  4. Complete certifications such as M-TIP, ADVT, AEIPS, DPAS
  5. Develop a system for recertification in 3 years. Security is ongoing so make sure you and your partners have a plan to stay certified
  6. Develop training for your team and customers. EMV isn’t just technology, there is some business process as well.
  7. Certify for PCI P2PE (point to point encryption)

If you’re looking for more info on EMV, here are some additional resources: