Press Release

Acquirers Shift PCI Compliance Focus from Risk Reduction to Revenue Generation

Second annual survey by ControlScan and Merchant Acquirers' Committee reveals changing attitudes, motivators driving Level 4 merchant payment security programs.

ATLANTA and LOS ANGELES, Jan. 10, 2013 - Newly released survey results from ControlScan and Merchant Acquirers' Committee (MAC) show that over the past year, acquirers' PCI program goals have shifted from a primary focus on risk mitigation to that of revenue generation. This and other key survey findings are detailed in the report, Risk and Revenue: Second Annual Survey of the Acquirer's Perspective on Level 4 Merchant PCI Compliance.

The annual survey by ControlScan, an expert provider of PCI compliance and data security solutions for Level 4 merchants and the acquirers who serve them, and MAC, a payments industry organization for bankcard professionals involved in risk management, measures acquirers' attitudes and objectives surrounding their Level 4 merchant PCI compliance programs. Level 4 merchants process fewer than 20,000 online credit card transactions or fewer than one million face-to-face credit card transactions annually. These merchants are typically small to mid-sized businesses (SMBs) and they represent 98 percent of all U.S. retailers.

"Competitive pressures in the payments space impact how acquirers balance their merchants' needs with their own business need for a healthy bottom line," said Joan Herbig, CEO of ControlScan. "Traditional merchant services are no longer as profitable as they once were, so we're seeing a conflict between risk and revenue play out in the way acquirers manage their PCI programs."

Other key findings from this year's ControlScan/MAC survey provide a unique, inside look into the differences between successful and unsuccessful PCI compliance programs, as well as the business drivers behind program trends. For example, the study found that acquirers reporting an organizational "lack of traction" for their PCI compliance program also report lower merchant PCI compliance rates and are more likely to have had a merchant suffer a recent data breach. These and other insights from the survey can be used to inform the decisions banks, processors and ISOs make as they re-evaluate their PCI programs.

"Acquirers should substantiate PCI-related costs and fees by offering their merchants sufficient return value for their investment," said Susan Matt, CFO for MAC and CEO/founder of payments consulting firm ThoughtKey, Inc. "A robust PCI program can provide merchants the support they need to successfully meet and maintain compliance, while an ineffective program does not produce long-term value for either party."

The free survey report includes specific recommendations to help acquirers successfully engage their Level 4 merchants in the PCI compliance process. ControlScan and MAC will also present the survey's findings in a joint Webinar to be held on January 24, 2013. Please click the following link for more information and to register: https://www2.gotomeeting.com/register/397163498.

About the Survey
The ControlScan/MAC Annual Acquirers Survey was completed in October 2012 by 123 banks, processors and ISOs with Level 4 merchant portfolios ranging from less than 1,000 accounts to more than 50,000.

About ControlScan
Headquartered in Atlanta, ControlScan delivers unified security and compliance solutions that help small and mid-sized businesses secure sensitive data and comply with information security and privacy standards. We support business owners, franchisees and merchant service providers with technology, services and expertise for PCI DSS, HIPAA and EI3PA compliance; vulnerability detection and risk mitigation; POS, e-commerce and mobile security; and more. For more information, please visit ControlScan.com or call 1-800-825-3301.

About Merchant Acquirers' Committee
MAC is dedicated to providing banks, ISOs and card associations with universal risk management solutions through ongoing communication and cooperation among its membership. For more information on MAC's 2013 Conference and sponsors, visit www.macmember.org.