The council has also launched a testing program for Hardware Security Modules (HSMs). "PIN entry devices go well beyond the typical POS terminals we are all familiar with and we are continually expanding into more and more areas," said Bob Russo, general manager, PCI Security Standards Council. "Any device that processes personal identification numbers is an important link in the transaction chain."
The PCI Security Council is branching out a little, with an attempt to bring unattended payment terminals (UPTs) under its jurisdiction. As kiosks get more sophisticated and start taking cash, credit cards, mobile transactions and other payment methods, the UPT security risk is sharply increasing.