September 23, 2009

Shift4’s 4Go Reduces PCI Burden and Ease of Compliance

Las Vegas, Nevada (September 23, 2009) – Shift4 Corporation, a leading developer of enterprise payment solutions, today announced the release of a video interview with Chris Mark of The Aegenis Group on YouTube, which vets the security of Shift4’s 4Go with SafeSwipe® solution with the DOLLARS ON THE NET® payment service for fast, reliable and secure electronic transaction processing.

“PCI compliance is a bear.  In my mind, simply by using 4Go they have reduced the need for PCI compliance and many, if not all the requirements.  I know how painful PCI compliance and achieving compliance can be; 4Go removes that pain.    So 4Go, in a lot of respects, makes the process more efficient, more effective, certainly makes it less painful and removes much of the risk,” stated Chris Mark, CEO and co-Founder of The Aegenis Group.

As a recognized leader in training and consulting around data security in the Payments industry, The Aegenis Group has more experience training on the Payment Card Industry Data Security Standards (PCI DSS) than any company in the world. Contracted with PCI SSC as worldwide trainer of Qualified Security Assessors (QSA), The Aegenis Group trained over 1,300 QSAs in 2007 and contracted with major Payment Card Brands to train all major acquirers and merchants. 

According to Chris Mark, financial institutions like banks and acquirers can also benefit from Shift4’s 4Go security solution: “When we talk about PCI compliance, the acquirers have to rely upon their merchants to not only validate compliance once, but they have to have confidence that merchant is in a state of compliance in perpetuity.  The challenge we know that is not the case, it is extraordinarily hard to maintain a secure environment in perpetuity.  Shift4’s 4Go solution removes the risk to the acquirer.  If the merchant does not have the data, there simply will not be a data compromise; the acquirer will never be fined.  So in my mind, the best risk mitigation strategy for an acquirer is to gently lead their merchants to a solution like 4Go.”

Shift4’s 4Go with SafeSwipe is Payment Application Best Practices (PABP) certified and Payment Application Data Security Standard (PA-DSS) validated. Shift4 Corporation received validation from the Payment Card Industry Security Standards Council® for compliance of 4Go and Enhanced Micros Drivers with the Payment Application Data Security Standard.  PA-DSS is a PCI Council-managed program that can help software vendors develop secure payment applications and ensure their payment applications are compliant with PCI DSS. Shift4’s 4Go and enhanced interface drivers for Micros 3700, 8700 and 9700 Point-of-Sale (POS) systems are PABP validated and grandfathered under the PA-DSS.

“Shift4 appreciates the kind words from Chris Mark in acknowledgement of the Real Security benefit of our  4Go technology.  As a world-renowned leader in the payment security, The Aegenis Group continues to educate businesses raising security awareness which helps merchants protect their brands.  We are certainly proud of all of our security products including 4Go, i4Go and Tokenization, which together go a long way to reducing the burden of compliance and to simplifying PCI,” said Dave Oder, President and CEO, Shift4 Corporation.

Used with Shift4’s DOLLARS ON THE NET payment service, 4Go SafeSwipe removes all useable personal credit card data at the POS terminal, in back-office data storage and during all data transport.  4Go SafeSwipe technology is the first solution of its kind in the payment processing industry. It works by securely encrypting transaction data at the point of sale – replacing any potentially useful data with “faux data” that cannot be used by anyone outside the system. Any logs that may have been left on inadvertently, any logs that traditionally log cardholder data or any logs associated with unsupported legacy systems are protected by this faux data, which means useable data is never retained in the POS device or the merchant’s system.

About The Aegenis Group 

The Aegenis Group is comprised of a suite of business units all dedicated to increasing the security of the payments infrastructure; Aegenis Consulting, Aegenis Publishing, and the Society of Payment Security Professionals.  Aegenis Consulting specializes in strategic consulting, training, and market development assistance for companies in and around the payment card industry.  Aegenis Publishing proudly offers eLearning courses and is the publisher of Secure Payments, the quarterly publication of the Society of Payment Security Professionals.  The Aegenis Group also founded and manages the Society of Payment Security Professionals, a community whose objective is to provide individuals and organizations involved in payment security with the opportunity to share information and access education and certification opportunities. Society members come from a variety of businesses including card brands, merchants, acquirers, issuers, ISOs, and more. For more information about The Aegenis Group, please contact us at