Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


03:06 PM
Dark Reading
Dark Reading
Products and Releases

NICE Introduces New Real-time PCI Solution

NICE SmartCenter's Interaction Recording helps contact centers ensure compliance

RA'ANANA, Israel, Jan. 12, 2011 /PRNewswire/ -- NICE Systems Ltd. (Nasdaq: NICE), the worldwide leader of intent-based solutions that extract insight to impact business performance, reduce financial risk and ensure safety and security, today announced new capabilities with NICE SmartCenter's Interaction Recording, that help contact centers ensure compliance with the recently updated requirement of the Payment Card Industry Data Security Standards (PCI-DSS) Council.

The PCI Data Security Standard (DSS) applies to all organizations that hold, process, or exchange credit and debit cardholder information. Non-compliant companies risk losing their ability to process credit card payments and being audited and/or fined. The updated requirement bans the audio recording and storage of sensitive cards validation codes and encourages contact centers to implement solutions that prevent the storage of this data.

The new solution from NICE helps organizations meet this mandate by leveraging the company's real-time desktop analytics for automatically pausing and resuming audio and screen recordings containing sensitive information. The result is a recorded interaction that doesn't contain the sensitive information as defined by the PCI DSS, such as the 3 or 4-digit card verification number. Furthermore, the solution enables the multiple stored recordings to be played back seamlessly and in accordance with the original call flow. It is available off-the-shelf with out-of-the-box capabilities that require no customization efforts, ensuring reliable and seamless compliance with complex regulatory requirements.

Aphrodite Brinsmead, analyst at Ovum said, "PCI requirements obligate organizations that handle credit card information to change the way they record and store data. In order to remove sensitive data from call recordings, enterprises need a system that automatically stops recording when card numbers are spoken over the telephone. Integration of desktop analytics and call recording, as offered by NICE, will help these organizations to meet regulations by expediting the process of removing cardholder information. They will be able to record and listen to interactions knowing that protected information has been removed."

Steve Palmer, Senior Manager of NICE Platform Planning, at Convergys Corporation, a global leading contact center and customer relations outsourcer, said, "For over five years NICE solutions have enabled us to elevate customer experience, cultivate customer loyalty, and achieve compliance. Last year we added data encryption capabilities from NICE. These capabilities are a market differentiator and go a long way to assuring the protection of sensitive customer information. And now, with the newly updated PCI DSS, PCI compliance has become even more complex. NICE has been a great partner in working through these sorts of challenges."

"We are happy to extend the benefits of our real-time capabilities to the payment card industry," said Udi Ziv, President, NICE Enterprise Group. "NICE has over 20 years of experience with compliance recording, and specific domain expertise with PCI DSS requirements through many deployments worldwide. We are already providing a set of solutions for facilitating PCI DSS compliance, including strong access control tools, multi-tiered security design, and end-to-end voice and screen media encryption. Now, with the addition of these latest capabilities we continue to be at the forefront of enabling compliance with the industry's latest requirements."

The PCI Security Standards Council is an open global forum for the ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection. The PCI Security Standards Council's mission is to enhance payment account data security by driving education and awareness of the PCI Security Standards. The organization was founded by American Express, Discover Financial Services, JCB International, MasterCard Worldwide, and Visa Inc.

The NICE Enterpriseoffering addresses the needs of customer-centric businesses with intent-based solutions that optimize Customer Dynamics. Driven by real-time, cross-channel analytics, NICE provides solutions for increasing revenue, enhancing customer experience, improving regulatory compliance, and optimizing contact center and back office operations. NICE Enterprise solutions are implemented by contact centers of all sizes, branches, trading floors and back offices.

About NICE Systems

NICE Systems (NASDAQ: NICE), is the worldwide leader of intent-based solutions that capture and analyze interactions and transactions, realize intent, and extract and leverage insights to deliver impact in real time. Driven by cross-channel and multi-sensor analytics, NICE solutions enable organizations to improve business performance, increase operational efficiency, prevent financial crime, ensure compliance, and enhance safety and security. NICE serves over 25,000 organizations in the enterprise and security sectors, representing a variety of sizes and industries in more than 150 countries, and including over 80 of the Fortune 100 companies. www.nice.com.

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
Why Cyber-Risk Is a C-Suite Issue
Marc Wilczek, Digital Strategist & CIO Advisor,  11/12/2019
DevSecOps: The Answer to the Cloud Security Skills Gap
Lamont Orange, Chief Information Security Officer at Netskope,  11/15/2019
Unreasonable Security Best Practices vs. Good Risk Management
Jack Freund, Director, Risk Science at RiskLens,  11/13/2019
Register for Dark Reading Newsletters
White Papers
Cartoon Contest
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2019-11-17
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or ...
PUBLISHED: 2019-11-17
iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git r...
PUBLISHED: 2019-11-17
jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file.
PUBLISHED: 2019-11-17
MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette.
PUBLISHED: 2019-11-16
Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands.