For Immediate Release Contact: Kathy Grannis or Ellen Davis (202) 783-7971 Email: grannisk@nrf.com or davise@nrf.com NRF to Develop Best Practice on PCI Compliance
Washington, January 3, 2008—The National Retail Federation announced today that it is developing an IT Best Practices reference library to provide guidance for implementing effective retail business processes. The first contribution to the library will be on PCI Compliance. NRF’s initial goal is to define best practices on each of the twelve basic PCI audit points with variations by retail segment in the first half of 2008. Other best practices to be included in the library are privacy, spam control, environmental protection, record retention and data management. Best practices will be developed by a sub-committee of the CIO Council supplemented with technical assistance by the ARTS Standards committees.
“Retailer leadership plus vendor support represents a successful formula for developing a library of IT best practices,” said David Hogan, NRF Senior Vice President and Chief Information Officer. “Today, retailers buy most applications with best practices built into them by the vendors. Working together ensures we have access to current practices and that enhancements are implemented in applications.”
NRF’s CIO Council will convene at NRF’s Annual Convention later this month to discuss the Best Practices reference library and the PCI Compliance guidelines.
“Retailers have invested a significant amount of time and money to fully understand and implement the controls to meet PCI requirements,” said William Franks, EVP and CIO of Saks. “As the required compliance audits roll down to all retailers, published Best Practices based on the actual experiences of many will result in cost savings, congruence, and will enable maximum protection of our customer’s information.”
The Best Practices Guides will be developed by collecting “how we do it” information from contributing retailers and vendors. All contributions will be analyzed by the committee and amalgamated into the “best practice.” Draft best practices will be posted to websites for further critique and enhancements before being declared “Best.”
The Association for Retail Technology Standards is an international membership organization dedicated to reducing the costs of technology through standards. Since 1993, ARTS has been delivering application standards exclusively to the retail industry. ARTS has three standards: The Standard Relational Data Model, UnifiedPOS and ARTS XML. Membership is open to all members of the international technology community- retailers from all industry segments, application developers and hardware companies. www.nrf-arts.org.