Search
41 articles found
Laws & Regulations
This communiqué regulates the procedures and principles for the information systems used in running payment and securities settlement systems, from information security to business continuity.
Laws & Regulations
The purpose of this regulation is to set the procedures and principles for overseeing payment and securities settlement systems, including information requests, information systems, self-assessment and independent audits.
Security
The Visa PIN Security Program Guide describes the security and procedural requirements for acquirers and their agents that process PIN data or manage keys for PINs associated with Visa transactions.
Payment Systems
PA DSS (Payment Application Data Security Standard) is a global security standard created by the PCI SSC. Even if you do not need to comply with it, PA DSS remains a valuable guide for auditing and building secure payment applications.
Security
An external network scan run every 3 months by an Approved Scanning Vendor authorized by card schemes such as MasterCard and Visa, required for PCI DSS compliance. It checks whether merchant systems are protected against external threats.
Security
A Qualified Security Assessor (QSA) is approved by the PCI Security Standards Council to audit merchants for PCI DSS compliance. The lists of QSA and ASV companies are published on the Council's website.
ISO 8583
We covered the ISO 8583 basics in an earlier article. This post explains the ISO 8583 message structure in detail: every ISO 8583 message consists of three main parts - the MTI (Message Type Indicator), the Bitmap, and the Data Elements.
ISO 8583
DE 11 - SYSTEMS TRACE AUDIT NUMBER: A 6-digit unique numeric value generated by the message originator, enabling unique tracking of the transaction. How is STAN generated?
Agentic Commerce
Can AI Decide on Our Behalf? Letting an AI agent handle research can make life much easier. The real question is where that should stop, and how much decision-making authority we are ready to hand over.
Payment Systems
Official Gazette No. 32332 dated 07.10.2023 published the amending Regulation and Communiqué covering digital wallets, e-money, share transfers, cloud outsourcing, remote identity verification and card system choice.
Laws & Regulations
With the communiqué published in the Official Gazette today (4 November 2023), electronic money institutions will be able to onboard customers remotely, a sign that they will play a bigger role in our lives while improving customer satisfaction and speed.
Payment Systems
Let's start by defining e-money. In general terms, e-money is a monetary value stored on a secure technological device (such as a computer disk). E-money is a concept defined under Turkish law through legislation enacted by the BRSA (BDDK).