Press Release

NCR Retail Point-of-Sale Solution Achieves Payment Application Security Acceptance

August 26, 2009 at 1:31 PM EDT

Use of compliant software helps retailers assure the security and privacy of consumers’ credit card data

DULUTH, Ga.--(BUSINESS WIRE)--Aug. 26, 2009-- NCR Corporation (NYSE: NCR) announced that version 5.4 of the NCR Advanced Store point-of-sale (POS) solution has been accepted as meeting the most current standards designed to protect consumers’ credit card information from potential security breaches.

A comprehensive POS solution, NCR Advanced Store drives store checkout operations for major general merchandise retailers around the world. It also provides key enterprise system capabilities, offering superior pricing and promotional capabilities; multichannel support and CRM functionality; returns management; mobile retailing and more.

The Payment Card Industry Security Standards Council (PCI SSC) has accepted the NCR application as compliant with the Payment Application Data Security Standard (PA-DSS) version 1.2. The PA-DSS was created to help software vendors and others develop secure payment applications that do not store prohibited data and assist merchants in their compliance with the PCI Data Security Standard (PCI-DSS).

The use of PCI-accepted solutions is a must for businesses that accept credit cards, according to David Taylor, security expert and founder of PCI Knowledge Base, a research community that shares information and knowledge to help merchants, banks and other organizations achieve PCI compliance. “The major card brands now require that banks processing payment card transactions only do business with merchants who use certified payment solutions or who have been certified themselves.”

The validation of NCR Advanced Store’s adherence to the PA-DSS was performed by Trustwave, a leading data security and compliance firm that holds Qualified Security Assessor (QSA) designation from the PCI SSC.

“We’re pleased that NCR Advanced Store, compared with competing POS solutions in its class, is in the forefront of validating PA-DSS compliance and helping retailers meet the PCI standards,” said Greg Egan, NCR vice president for Retail and Hospitality Solution Management. “Retailers using NCR Advanced Store 5.4 in their stores can do so with an extra measure of confidence that they will be one step closer to providing a PCI compliant environment for the protection of their customers’ credit card data.”

About the PCI Security Standards Council

The mission of the PCI Security Standards Council is to enhance payment account security by fostering broad adoption of the PCI Data Security Standard and other standards that increase payment data security. The PCI Security Standards Council was formed by the major payment card brands American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa Inc. to provide a transparent forum in which all stakeholders can provide input into the ongoing development, enhancement and dissemination of the PCI Data Security Standard (DSS), PIN Entry Device (PED) Security Requirements and the Payment Applications Data Security Standard (PA-DSS). Merchants, banks, processors and point of sale vendors are encouraged to join as Participating Organizations.

About NCR Corporation

NCR Corporation (NYSE: NCR) is a global technology company leading how the world connects, interacts and transacts with business. NCR’s assisted- and self-service solutions and comprehensive support services address the needs of retail, financial, travel, healthcare, hospitality, entertainment, gaming and public sector organizations in more than 100 countries. NCR (www.ncr.com) is headquartered in Duluth, Georgia.

NCR is a trademark of NCR Corporation in the United States and other countries.

Source: NCR Corporation

NCR Corporation
Peter Tulupman, 212-589-8415
peter.tulupman@ncr.com