Re: Tokenization on the Power i

[Ira Chandler <ira@xxxxxxxxxxxxx>]

I suspect Paul's question was not related to credit card data, but just
wanted to offer this warning.

If anyone is considering rolling their own credit card encryption and/or
tokenization method, know that the credit card data that you handle would
be in scope for PCI audit, and would likely be under the Self-Assessment
Questionnaire "D", which can take weeks or months to complete.  Just
touching any credit card data, even if you do not store it, puts you
squarely in scope of these PCI requirements.  Further, passing the credit
card data to a "cloud" is an order of magnitude more challenging to
document to show compliance.  One's scope does not change if you use a
third party to obtain a "remote token" if you are handling the card data in
the first place.

*Ira Chandler, PCI QIR*

*CTO, Curbstone CorporationTechnical Services - 888-844-8533*
*https://curbstone.com/email_disclaimer
<https://curbstone.com/email_disclaimer>*


On Fri, Dec 14, 2018 at 3:48 PM Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

> We are looking to tokenize some of our critical data.
> Our 3rd party app allows the configuration, but does not supply the
> tokenization piece.
>
> We looking for various solutions that would return a token.
>
> Anyone in the group doing tokenization?
> Is there a list of 3rd party vendors that do tokenization?
> Could it be accomplished with a Web Service, keeping it internal and on
> the i?
>
> I'm cross-posting this also to the Web400 group.
>
> Thank You
> _____
> Paul Steinmetz
> IBM i Systems Administrator
>
> Pencor Services, Inc.
> 462 Delaware Ave
> Palmerton Pa 18071
>
> 610-826-9117 work
> 610-826-9188 fax
> 610-349-0913 cell
> 610-377-6012 home
>
> psteinmetz@xxxxxxxxxx
> http://www.pencor.com/
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com