What Exactly Is the Impact of End to End Encryption on PCI DSS Compliance?

Submitted by VeriFone

Many retailers are asking what the real impact of implementing an end to end encryption solution will have on PCI DSS compliance.

Implementing a proper end to end encryption solution should allow retailers to reduce PCI compliance scope. This does not mean that they can remove systems that are in the path of payment processing from needing to be PCI DSS compliant, but it means that they will no longer need to implement and maintain many of the required controls on those systems.

VeriFone commissioned Coalfire, a PCI QSA to do a study on the impact of implementing VeriShield Protect end to end encryption on PCI DSS compliance. The study should be completed by mid-February. Read the executive summary here.