information security, payment security, mastercard testing, PTS program, credit card security, eftpos security

Safe Communication: MasterCard POS Terminal Security

The MasterCard POS Terminal Security (PTS) requirements apply to all devices that communicate card payment information across an open IP or wireless connection. Witham Laboratories is one of the few laboratories worldwide that is approved to perform evaluations on compliance with the MasterCard PTS program.

Witham Laboratories assists clients in understanding the impact the PTS program has on their products. In providing guidance, we are able to help clients ensure the products they are designing meet the PTS requirements.

As an accredited Qualified Security Assessor (QSA) and accredited PCI PED assessor, we can also provide information on how the PTS standards relate to PCI requirements, such as PCI DSS, PA-DSS, and PCI PED. This is a complex area of information security, and our clients are always relieved to have the resource of our specialist knowledge available to them.

The testing process

A PTS evaluation is similar to a penetration test that is performed on POS devices. It is conducted to determine any weaknesses in the services and protocols that the IP or wireless connection provides. The methods used to secure and authenticate the communications channel are also assessed.

To conduct a PTS evaluation, documentation, software, and sample devices are required to allow us to exercise all services and key management functions. Our thorough testing process usually takes around 2 to 4 weeks.