NSS Labs touts PCI certification program

Security product-testing firm NSS Labs has started a certification program based on requirements associated with the Payment Card Industry security standard.

Rick Moy, chief marketing officer at NSS Labs, says the firm intends to test products in six categories to determine if they are suitable to meet the PCI standards for payment card networks. These categories are: firewalls, unified threat management, Web application firewalls, host and network intrusion prevention, and wireless security.

“We’re inviting vendors to test with us,” Moy says. NSS Labs has not announced any vendor participants in its PCI certification program, which costs $45,000 and is expected to take about six to eight weeks to complete.

Vik Phatak, chairman and CEO of NSS Labs, says the product-testing firm has joined the PCI Security Standards Council as a vendor participant, and is confident it can bring its security expertise to bear to determine proper configuration, for instance, in products to be used in networks required to be PCI-compliant.

NSS Labs, founded in 1991, was previously based in Europe but moved its headquarters to Chicago earlier this year.