So Is MOM really PCI Compliant??

So Is MOM really PCI Compliant?? Visa & Mastercard security compliance

#1 Jaaay

Newbie

Group: Members
Posts: 5
Joined: 22-June 05

Posted 29 June 2005 - 02:04 PM

After Reviewing Visa & mastercards "Payment Card Industry Data Security Standard". (PCI) I have found some things I believe Dydacomp is going to need to change.. Section 3.3 states that Account Numbers need to be masked when displayed.

It also notes that this doesn't apply to those employees and other parties with a specific need to see full credit card number..

Well our customer service agents don't need to see the FULL account number to take an order with a customer with a saved credit card number, they only need to verify the last four digits.

MOM doesn't have an option for this.

So Is MOM and my company not in compliance????

#2 Videoflicks2004

GLOBAL MODERATOR

Group: Moderators
Posts: 241
Joined: 29-September 04
Gender:Male
Location:Canada
Interests:~ DVD ~ BLUE RAY ~ HD DVD ~ HOLOGRAPHIC DVD ~ Quantum Computing.

Posted 29 June 2005 - 03:11 PM

Jaaay, on Jun 29 2005, 06:04 PM, said:

Jaaay,

Check you user security prefs... you can hide the cc's from users.

Cheers,

Videoflicks2004

David Narciso
Ecommerce Operations Manager CVS Inc

dnarciso@cvsinc.ca

mobile: 4168238175

DISCLAIMER: Always backup your MOMWIN folder before attempting to perform any updates, testing, etc. Once you blast the data away it's gone forever.
My advice is based on my 8 years of experience with MOM and Dydacomp. If you are not comfortable with data manipulation then hire someone who is.

#3 WHI

Member

Group: Members
Posts: 24
Joined: 19-May 04

Posted 01 July 2005 - 12:51 PM

If you set MOM up so that users can't see card numbers can they still see the last 4 digets?

#4 Jaaay

Newbie

Group: Members
Posts: 5
Joined: 22-June 05

Posted 05 July 2005 - 02:42 PM

WHI, on Jul 1 2005, 01:51 PM, said:

If you set MOM up so that users can't see card numbers can they still see the last 4 digets?

Not that I can find.

My response from Dydacomp is that they have no plans to mask it either.

#5 jwurunner

Advanced Member

Group: Members
Posts: 31
Joined: 03-June 04
Location:MA,USA

Posted 05 July 2005 - 03:15 PM

Jaaay, on Jul 5 2005, 06:42 PM, said:

Not that I can find.

My response from Dydacomp is that they have no plans to mask it either.

Hi,
We are running M.O.M. 5.2 build 6/14/05 and it will mask all but the last 4 numbers when viewing an order.

#6 ypf1258

Advanced Member

Group: Moderators
Posts: 101
Joined: 05-July 04
Gender:Male
Location:ny

Posted 05 July 2005 - 08:45 PM

jwurunner, on Jul 5 2005, 03:15 PM, said:

Hi,
We are running M.O.M. 5.2 build 6/14/05 and it will mask all but the last 4 numbers when viewing an order.

this feature is also available in 4.2

#7 Jaaay

Newbie

Group: Members
Posts: 5
Joined: 22-June 05

Posted 06 July 2005 - 09:07 AM

jwurunner, on Jul 5 2005, 04:15 PM, said:

Hi,
We are running M.O.M. 5.2 build 6/14/05 and it will mask all but the last 4 numbers when viewing an order.

We are running 5.2 as of I think the 20th.

With this feature ON it does mask the credit card numbers on orders already taken. "Viewing the order" But then you can't see any previous cards used for a re-order.

So we have to take this option off. With this option OFF all the numbers are displayed.

I believe MOM needs to mask the numbers only to show the last 4 were you take another order with a previous customer and their cards.

Are your guys numbers masked when taking another order with a previous customer with the feature turned ON?