Witham - Payment Industry Specialists
Welcome to Witham Laboratories - the leading independent provider of information security evaluations, offering specialist consultancy and advice in payment industry security.
We provide our services to clients around the world, and our many years of experience in the detailed review of payment software and hardware security allow us to deliver timely and cost-effective reports, expert guidance as early as the design stage, and training in the various complex industry standards around the world.
During the evaluation process we stay in close contact with our clients, offering real-world knowledge and advice. Our aim is to facilitate understanding of the complex legal and industry requirements that must be met by all manufacturers, distributors and users of payment devices or applications.
As experts in the payment industry:
- We are the only laboratory in the Asia-Pacific region accredited by the Payment Card Industry (PCI) to evaluate PIN Entry Devices for compliance
- We are APCA and ETSL accredited for bank evaluations in Australia and New Zealand respectively. These countries have different security requirements to PCI, but in one report we can cover all of them
- We have employees who are active in the formation of both local and international security standards, which means we have first-hand knowledge to solve highly technical problems
Secure yourself and your customers against non-compliance and information leakage with specialist testing and advice. Witham Laboratories is rare in its list of accreditations and capabilities. As a Qualified Security Assessor (QSA), we offer you:
- Evaluations in PIN Entry Device and device security
- Evaluations for the MasterCard POS Terminal Security (PTS) program
- Key management and cryptography consultancy
- Compliance evaluation and consultancy in the PCI Data Security Standard (PCI DSS), PCI PIN Security and PCI Payment Application Data Security Standard (PA DSS)
- Side channel analysis and information leakage consultancy
- Training and seminars in the various PCI requirements for all regions
