Common.SECC – Security evaluation of payment terminals based on established standards

Payment terminals are a central element in stationary retail. They must meet the highest security requirements – especially with regard to the protection of sensitive payment data and cryptographic keys. The Common.SECC certification framework provides a structured, comprehensible framework for the security assessment of such terminals.

What is Common.SECC?
Common.SECC (Common Security Evaluation & Certification Consortium) was developed by leading players in the European banking industry. It is based on the internationally recognized ISO 15408 Common Criteria standard and generally enables a structured, comparable security evaluation of security components, and therefore in particular of payment terminals in the area of girocard and EMV applications.

The goal:

Uniform requirements for the safety assessment
Transparent test methods and comprehensible results
Greater trust among all parties involved in payment transactions

Why is this relevant?
For terminal manufacturers and providers, a Common.SECC assessment is increasingly important in order to meet market requirements, comply with regulatory requirements and ensure acceptance in the girocard system and other payment systems.

Advantages of Common.SECC:

Structured valuation approach based on an established international standard
Market acceptance and trust through comprehensible proof of safety
Orientation for regulators, partners and customers

How does SRC provide support?
SRC has in-depth knowledge and many years of experience in the security assessment of complex IT systems and is very familiar with the requirements of the Common.SECC certification framework. We are currently supporting our clients in the implementation and preparation of Common.SECC evaluations – in a practical, solution-oriented manner and with a view to the specific market requirements.

Our expertise for your solution: