Information Risk Management Plc.

IRM is now a PABP

IRM is now a VISA Europe Payment Application Best Practice (PABP) certified company and has two Qualified Payment Application Security Professionals (QPASP). IRM is now qualified to assess vendors software applications which are designed to process payment cards, on behalf of VISA Europe.

The VISA Europe Payment Application Best Practice (PABP) applies to software vendors which develop payment applications that store, process, or transmit cardholder data as a part of payment card authorisation or settlement.

The requirements for the PABP are based upon the Payment Card Industry Data Security Standard (PCI DSS) and the PCI DSS Security Audit Procedures. These documents set out the requirements for PCI DSS compliance. Copies of the documents can be downloaded from the PCI DSS section of the IRM website.

The PABP refines the PCI DSS requirements to determine what is needed for compliant vendor software. It sets out what is required of payment application software in order that it supports the application user’s compliance with PCI DSS. PABP certification of a software product is a significant advantage to payment card processing software vendors as it demonstrates that their software will not compromise merchants PCI DSS compliance. This provide a major marketing advantage to the software vendor.

IRM has been testing software applications for clients for many years and has built up considerable expertise in this specialism. Application software testing assignments range from competition Web sites to fraud prevention within financial institutions.

About IRM:

Information Risk Management Plc (IRM) is a vendor independent information risk consultancy, founded in 1998. IRM has become a leader in client side risk assessment, technical level auditing and in the research and development of security vulnerabilities and tools. IRM is headquartered in London with Technical Centres in Europe and Asia as well as Regional Offices in the Far East and North America.