Witham Laboratories

PIN Entry Security Evaluations

PCI DSS Services

PCI PIN Audits

Key Loaders and PIN Mailers

Technical Consultancy

Contact Witham

Email:	lab@withamlabs.com
Tel/Fax:	+61 3 9846 2751
Mobile:	+61 414 991 231

Languages


		日本語		한국어		繁體		简体

English 日本語 한국어 繁體中文简体中文

WITHAM Laboratories is the leading provider of hardware and software security evaluations in the Asia/Pacific region.

The Payment Card Industry now requires that all newly deployed PIN entry devices must be assessed by an accredited laboratory. We are the only such laboratory in the Asia/Pacific region. Based in Melbourne, we share working hours with Japan, Korea, and China, but we have clients worldwide.

We are also accredited by A.P.C.A. for the Australian banks, and by E.T.S.L. for the New Zealand banking network. These countries have different security requirements to PCI, but in one report we can cover all of them. We also evaluate ATMs, and non-banking security devices.

We can review a planned PIN entry device at the design stage, and provide guidance that will bring the final device into compliance with PCI and ISO 13491 requirements. During the evaluation we keep in close contact with our client and we provide advice and assistance where possible, compatible with our independent role and without breaking our non-disclosure agreements with other clients.

We build and sell hardware and software solutions for data security applications, such as PIN generation, remote PIN selection, key migration, device testing, and general cryptography. Our hardware-based "SKID" and "SID" devices are in daily use for injecting keys into PIN pads across Australia and New Zealand.

We assist banks with the annual PCI PIN security audit, bringing in our knowledge of current best practice. During these audits we discover and confidentially review the exact significance of a bank's data security weaknesses. We often find ways to improve efficiency while preserving good security. We are also accredited to perform vulnerability scans according to the PCI Data Site Security (DSS) standard, which combines the MasterCard SDP and Visa AIS programs.

Here are our PGP keys, and how to contact us.