EMV- CHIP & Choice..not Chip & PIN…Start Moving! March 23, 2015
Posted by Chris Mark in Uncategorized.Tags: Chip & PIN, Chris Mark, data breach, EMV, EMVCO, fraud, Liability Shift, mastercard, PCI, visa
add a comment
After deviating from my ‘security’ theme, I am back to talk about InfoSec. Last week I had the opportunity to attend Visa Accredited EMV Consultant Training at Visa’s Headquarters in Foster City, CA. As always, Visa put on a top tier program with numerous experts in Payment Card ‘chip’ technology. Since the topic was EMV most of the experts were from Across the Pond. Thanks to Mark, Chris and the others for great training!
For those who are new, EMV or “Europay, MasterCard, Visa” is a technology where a microprocessor ‘chip’ is embedded in a payment card (credit card, debit card, etc.). It is often erroneously referred too as “Chip & PIN” but EMV really only applies to the Chip technology. If a region or issuer wants to prefer PIN, they are able. Visa has a “Chip and Choice” model where they allow Chip with signature, no signature, or PIN depending upon the issuer, the risk and type of transaction (ie. Debit for Cash or ATM require a PIN). There was too much information over 2 days to talk about in this post but there was one point I learned and wanted to pass on..
In October 2015, Visa is offering a ‘liability shift’ for merchants who adopt EMV. My belief (it was wrong) until I attended the training was that the EMV liability shift only affected those merchants who 1) accepted a ‘chip’ card and on ‘chip’ transactions. These are known as ‘chip on chip’. It is critical that Merchants understand that the liability shift occurs for merchants who accept transacitons over a dual interface terminal (Chip and NFC) who accept transactions of ANY form. As an example, if you accept 99% mag stripe transactions but you have dual interface terminals…the fraudulent transacion due to counterfeit have liability shifted to the issuer! It does NOT have to be a Chip on Chip transaction.
The Second important point to remember is that Visa is offering a Technology Incentive Program (TIP) that states if a Level 1 Merchant accepts 75% of transactions over a Dual Interface terminal, they do not have to validate compliance with an onsite assessment. There are some caveats to this so make sure you read the rules!
To get ready for implementation, ensure you download the Visa Merchant Readiness Acceptance Guide here.
Chris Mark on NPR “Here and Now” talking about R&S Foundation January 22, 2015
Posted by Chris Mark in Uncategorized.Tags: charity, chris kyle, Chris Mark, Here and Now, NPR, R&S Foundation, scout, sniper, USMC
add a comment
I was asked to interview for NPR’s “Here and Now” related to the movie American Sniper and the role of snipers in combat. This was the result of writing an article for the National Review on the same subject. If you are interested in listening to the interview, you can listen to it here. Most importantly, I was able to get some well needed press for the R&S Foundation (Recon and Sniper). This is a charity formed to help those brothers in our community (and other service members and veterans) who may be struggling. We just found out that we lost another one of brothers yesterday. Please visit www.SniperFoundation.org
Chris on NewsMax TV Speaking about American Sniper January 21, 2015
Posted by Chris Mark in Uncategorized.Tags: American Sniper, chris kyle, Chris Mark, iraq, R&S Foundation, scout, sniper, Steve Malzberg
add a comment
I was invited to speak to NewsMax TV about the various comments related to Chris Kyle and the sniper community at large that have been circulating. I am always honored to have the opportunity to represent the larger sniper community and dispel the myth that we are somehow heartless killing machines or knuckle dragging troglodytes. Thank you NewsMax for the opportunity! You can read the article created from the transcript: “Ex Marine Sniper: Michael Moore Clueless about Us.”
Chris Mark in the National Review (Smearing Snipers) January 16, 2015
Posted by Chris Mark in Uncategorized.Tags: American, chris kyle, Chris Mark, Marines R&S Foundation, scout, sniper
3 comments
I was asked to write a review of the movie American Sniper. The National Review asked for a ‘sniper’s’ perspective on the movie. I asked if I could write a larger piece on how snipers are maligned as ‘hate filled killers’ and ‘murderers’. I am excited that I was given the opportunity to tell a story that is not often told. I am grateful to the National Review for providing the opportunity to give insight into the dangerous job of being a sniper. The name o the article is “Smearing Snipers; What Many Americans Don’t Get About Our Warrior Elite” If you are so inclined, please consider donating to the R&S Foundation. We are a group of volunteer former Reconnaissance Marines and Scout Snipers who work to support our brothers in need. You can donate here. Thank you for anything you can give!…
Chris Mark speaking at COMTEC 2014 by TouchNet August 27, 2014
Posted by Chris Mark in Uncategorized.Tags: AT&T, Breach, cardholder, Chris Mark, compromise, COMTEC, Data, data security, education, higher, PCI, TouchNet
add a comment
Chris Mark will be presenting at the 2014 COMTEC TouchNet Client Conference on PCI DSS and data security within the payment card industry. The title of the presentation will be Hitting the PCI Bullseye. COMTEC is the premier conference for Higher Education organizations. I was invited to speak in 2012 but found myself delayed returning to teh US as I was in the Gulf of Aden providing maritime security. Below is a description from the TouchNet website.
“Join us for the COMTEC pre-conference PCI Workshop: Hit the Bullseye on November 10th. This power-packed day of PCI and security training is vital for business, security, compliance, audit, and IT professionals who want to stay on target with changes in payment security rules in the coming year. You’ll get real-world advice on compliance and best practices from industry experts and campus leaders who are dedicated to information security.”
Global Security, Privacy, & Risk Management 