Re: Tokenization on the Power i

I suspect Paul's question was not related to credit card data, but just
wanted to offer this warning.

If anyone is considering rolling their own credit card encryption and/or
tokenization method, know that the credit card data that you handle would
be in scope for PCI audit, and would likely be under the Self-Assessment
Questionnaire "D", which can take weeks or months to complete. Just
touching any credit card data, even if you do not store it, puts you
squarely in scope of these PCI requirements. Further, passing the credit
card data to a "cloud" is an order of magnitude more challenging to
document to show compliance. One's scope does not change if you use a
third party to obtain a "remote token" if you are handling the card data in
the first place.

*Ira Chandler, PCI QIR*

*CTO, Curbstone CorporationTechnical Services - 888-844-8533*
*https://curbstone.com/email_disclaimer
<https://curbstone.com/email_disclaimer>*


On Fri, Dec 14, 2018 at 3:48 PM Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

We are looking to tokenize some of our critical data.
Our 3rd party app allows the configuration, but does not supply the
tokenization piece.

We looking for various solutions that would return a token.

Anyone in the group doing tokenization?
Is there a list of 3rd party vendors that do tokenization?
Could it be accomplished with a Web Service, keeping it internal and on
the i?

I'm cross-posting this also to the Web400 group.

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com