cisp list of cisp compliant service providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... ·...

22
Visa U.S.A. Cardholder Information Security Program (CISP) List of Compliant Service Providers The companies listed below successfully completed a CISP review based on the PCI Data Security Standard. The "VALIDATION DATE" is the date of last compliance. CISP reviews are valid for one year, with the next annual report due to Visa one year from the "VALIDATION DATE". Reports that are from 1-60 days late are noted in yellow and reports that are from 60-90 days late are noted in red. Entities with reports over 90 days past due are removed from this list. It is the member's responsibility to use compliant service providers and to follow up with service providers if there are any questions about their compliance status. As Of August 31, 2008 SERVICE PROVIDER VALIDATION DATE SERVICES COVERED BY REVIEW (1) ASSESSOR Visa U.S.A. Cardholder Information Security Program (CISP) List of Compliant Service Providers - All 1ShoppingCart.com Internet Payment Processing June 30, 2008 Security Metrics 1st Americard Merchant Payment Services March 31, 2008 Trustwave 3Delta Systems Merchant Payment Services July 31, 2007 Fortrex Technologies 3Pea Technologies, Inc Prepaid Card Processing May 31, 2008 SecurityMetrics A3 IT Solutions Managed Hosting November 30, 2007 Trustwave AAFES Managed Hosting July 31, 2008 IBM Internet Security Systems Payment Gateway Payment Processing ABC Financial Account Billing Services May 31, 2008 Trustwave Academy Collection Service Debt Collection Agency October 31, 2007 Self-Assessment Accel Networks Wireless Payment Processing January 31, 2008 Trustwave AccountNow Account Management Services June 30, 2008 Trustwave Accounts Receivable Management (ARM) Account Collections June 30, 2008 Self-Assessment ACH Direct Merchant Payment Processing November 30, 2007 RSM McGladrey ACI Worldwide Merchant Payment Processing April 30, 2008 Solutionary, Inc ACS Government and Community Solutions Payment Processing August 31, 2008 Jefferson Wells Acxiom ICS/BNS Core & ISC/BNS Proprietary Bankruptcy Notification Services August 31, 2008 Verisign Acxiom ICS/BNS Proprietary - 1 & 2 August 31, 2008 Verisign 1 of 22 (1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. © 2008 Visa U.S.A. Inc. Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices. Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Upload: others

Post on 27-Jul-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers

The companies listed below successfully completed a CISP review based on the PCI Data Security Standard.

The "VALIDATION DATE" is the date of last compliance. CISP reviews are valid for one year, with the next annual report due to Visa one year from the "VALIDATION DATE". Reports that are from 1-60 days late are noted in yellow and reports that are from 60-90 days late are noted in red. Entities with reports over 90 days past due are removed from this list.

It is the member's responsibility to use compliant service providers and to follow up with service providers if there are any questions about their compliance status.

As Of August 31, 2008

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

1ShoppingCart.com Internet Payment ProcessingJune 30, 2008 Security Metrics

1st Americard Merchant Payment ServicesMarch 31, 2008 Trustwave

3Delta Systems Merchant Payment ServicesJuly 31, 2007 Fortrex Technologies

3Pea Technologies, Inc Prepaid Card ProcessingMay 31, 2008 SecurityMetrics

A3 IT Solutions Managed HostingNovember 30, 2007 Trustwave

AAFES Managed HostingJuly 31, 2008 IBM Internet Security Systems

Payment Gateway

Payment Processing

ABC Financial Account Billing ServicesMay 31, 2008 Trustwave

Academy Collection Service Debt Collection AgencyOctober 31, 2007 Self-Assessment

Accel Networks Wireless Payment ProcessingJanuary 31, 2008 Trustwave

AccountNow Account Management ServicesJune 30, 2008 Trustwave

Accounts Receivable Management (ARM)

Account CollectionsJune 30, 2008 Self-Assessment

ACH Direct Merchant Payment ProcessingNovember 30, 2007 RSM McGladrey

ACI Worldwide Merchant Payment ProcessingApril 30, 2008 Solutionary, Inc

ACS Government and Community Solutions

Payment ProcessingAugust 31, 2008 Jefferson Wells

Acxiom ICS/BNS Core & ISC/BNS Proprietary

Bankruptcy Notification ServicesAugust 31, 2008 Verisign

Acxiom ICS/BNS Proprietary - 1 & 2

August 31, 2008 Verisign

1 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 2: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Adeptra Call Center ServicesDecember 31, 2007 Trustwave

Fraud and Chargeback Services

Adteractive, Inc. Merchant Digital MarketingFebruary 28, 2008 Digital Resources Group (DRG)

Aegis Communications Call Center ServicesDecember 31, 2007 K3DES

Affinity Solutions Loyalty ProgramsNovember 30, 2007 Solutionary

AHT Services Payment GatewayJuly 31, 2008 Trustwave

Airlines Reporting Corporation Payment ProcessingFebruary 28, 2008 Verisign

Alaska Option Services EFT ProcessingApril 30, 2008 K3DES

Aliaswire Payment GatewayOctober 30, 2007 IGX Global

Alliance Data - Network Services Merchant Payment ProcessingOctober 31, 2007 Cybertrust

Alliance Data - Remittance Processing

Remittance ProcessingMay 31, 2008 Cybertrust

Alliance Data - Retail Services Back Office Services for marketing and collection

January 31, 2008 Cybertrust

Alliance Entertainment Corp Payment GatewayJune 30, 2008 Solutionary

Alta Resources Account Billing ServicesApril 30, 2008 IBM Internet Security Systems

Payment Processing

Amazon.com Internet Payment ProcessingOctober 31, 2007 Trustwave

American Data Technology Managed HostingApril 30, 2008 Self-Assessment

Americaneagle.com Co-Location HostingNovember 30, 2007 Fortrex Technologies

Managed Hosting

Managed Merchant Hosting

Physical Security

Andera, Inc. New Accounts OnlineSeptember 30, 2007 Self-Assessment

Angel.com Account Management ServicesOctober 31, 2007 Self-Assessment

Aplus.Net Internet Payment ProcessingJuly 31, 2008 Security Metrics

Applied Card Systems Credit Card Account ServicingJuly 31, 2008 Self-Assessment

Apriva Merchant Payment ProcessingJuly 31, 2008 Trustwave

Arcaneo Web-based ReportingDecember 31, 2007 Self-Assessment

Ariba Inc Expense ManagementMay 31, 2008 Payment Software company (PSC)

Arise Virtual Solutions Payment Transmission ServicesMay 31, 2008 Verisign

Art Technology Group (ATG) Payment GatewayNovember 30, 2007 Payment Software company (PSC)

Arvato Finance Services Limited Payment ProcessingJuly 31, 2008 Acertigo AG - An EXCELSIS Company

2 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 3: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

AT&T Managed Services - AT&T Enhanced VPN Services, AT&T VPN Services, AT&T Private Network Transport Services

Managed MPLS VPNJuly 31, 2008 Trustwave

AT&T Managed Services - AT&T Network Based IP VPN Remote Access Service / AT&T VPN Tunneling Service

Managed VPNMay 31, 2008 Trustwave

AT&T Managed Services - Endpoint Security

Managed SecurityJuly 31, 2008 Trustwave

AT&T Managed Services - Intrusion Detection Services

Managed SecurityJuly 31, 2008 Trustwave

AT&T Managed Services - Intrusion Prevention Services

Managed SecurityJuly 31, 2008 Trustwave

AT&T Managed Services - IP Telephony and LAN Services

Managed VPNJuly 31, 2008 Trustwave

AT&T Managed Services - Managed Router Services

Managed VPNJuly 31, 2008 Trustwave

AT&T Managed Services - Network Based Firewall

Managed SecurityJuly 31, 2008 Trustwave

AT&T Managed Services - Premises Firewall

Managed SecurityJuly 31, 2008 Trustwave

AT&T Managed Services - Transaction Routing Service

Payment Transmission ServiceJuly 31, 2008 Trustwave

AT&T Managed Services - VoiceTones

Data ServicesJuly 31, 2008 Trustwave

IVR Services

Atlantech Online, Inc Data-Center HostingJuly 31, 2008 TrustWave

Physical Security

AuBeta Networks Corporation Payment Transmission ServicesJune 30, 2008 Trustwave

Authorize.NET Internet Payment ProcessingNovember 30, 2007 Trustwave

BA Merchant Services Payment ProcessingMarch 31, 2008 Trustwave

Bank Card Services, Inc Merchant Payment ProcessingMay 31, 2008 Trustwave

BankersBank Card Services Back Office Services for marketing and collection

November 30, 2007 Self-Assessment

Bankserv Merchant Payment ProcessingOctober 31, 2007 Payment Software Company (PSC)

Beanstream Internet Payment ProcessingAugust 31, 2007 Dyntek

BearingPoint ePay Internet Payment ProcessingNovember 30, 2007 Trustwave

BillMatrix Bill Payment ProcessingFebruary 28, 2008 Trustwave

3 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 4: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Blackboard Merchant Payment ProcessingMay 31, 2008 Trustwave

Bluefin Payment Systems Merchant Payment ProcessingOctober 31, 2007 403 Labs

BluePay Merchant Payment ProcessingMay 31, 2008 Trustwave

BSG Payments (formerly Billing Concepts)

Merchant Payment ProcessingNovember 30, 2007 Trustwave

Business Data Record Services Records ManagementNovember 30, 2007 RSM McGladrey

Tape Storage

Caledon Card Systems Payment ProcessingJune 30, 2008 MTS Allstream

Capital Card Services Credit Card ServicesApril 30, 2008 Trustwave

Card Management Corp. Credit Card ServicesAugust 31, 2008 Crowe Chizek

Card Tranz, Inc. Merchant Payment ProcessingJune 30, 2007 Trustwave

Cardholder Brokerage Services, Inc. (CBSI)

Account Management ServicesJuly 31, 2008 Self-Assessment

Cardinal Commerce Corp. Verified by Visa Merchant ServicesDecember 31, 2007 Payment Software Company (PSC)

CardService International, a First Data Company

Merchant Payment ProcessingAugust 31, 2007 Trustwave

Cardtronics EFT ATM ProcessingMay 31, 2008 K3DES

Cardworks Processing Payment ProcessingAugust 31, 2008 Accuvant

Cardworks Servicing LLC Account Management ServicesFebruary 28, 2008 Jefferson Wells

Carlson Marketing Worldwide (Visa Data Track)

Visa Data TrackMarch 31, 2008 Trustwave

Carlson Marketing Worldwide (Visa Extras)

Visa ExtrasJune 30, 2008 Trustwave

CartManager Payment ProcessingFebruary 28, 2008 Trustwave

Cash Systems ATM ProcessingNovember 30, 2007 Information Exchange

CashLINQ Group, LLC Merchant Payment ServicesAugust 31, 2008 SecurityMetrics

Catalyst Payments Merchant Payment ProcessingApril 30, 2008 Trustwave

Cboss Payment ProcessingNovember 30, 2007 SecurityMetrics

CCBill Internet Payment ProcessingJanuary 31, 2008 Chief Security Officers

Center Partners Call Center ServicesOctober 31, 2007 Verisign

Central Coast Processing Payment ProcessingApril 30, 2008 403 Labs

Central States Indemnity Payment ProcessingNovember 30, 2007 FishNet Security

Centrix Bank – LockBox Service Payment GatewayMay 31, 2008 SecurityMetrics

Century Bankcard Services Merchant POS ProcessingMay 22, 2008 Information Exchange

4 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 5: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Certain Software Web-based ReportingFebruary 28, 2008 Payment Software Company (PSC)

Certified Payments Payment ProcessingJune 30, 2007 Trustwave

Chase Loyalty Solutions Merchant Payment ProcessingDecember 31, 2007 Trustwave

Chase Paymentech Solutions, LLC.

Gift Card ProcessingJanuary 31, 2008 Trustwave

Internet Payment Processing

Payment Processing

ChockStone Gift Card ProcessingJuly 31, 2007 Trustwave

Merchant Payment Processing

Stored Value Card Processing

ChoicePay Internet Payment GatewaySeptember 30, 2007 K3DES

Chrislands, Inc Managed Merchant HostingNovember 30, 2007 Raven Eye

Cintas Document Management Off Site Data ProtectionJune 30, 2008 Self-Assessment

CityXpress Internet Payment GatewayFebruary 28, 2008 Trustwave

ClearCommerce Internet Payment ProcessingMay 31, 2008 Trustwave

Verified by Visa Hosted Payer Authentication

Clearent New Merchant AccountsApril 30, 2008 Trustwave

Report Processing

ClearTran Merchant Payment ProcessingJanuary 31, 2008 SecurityMetrics

Columbus Data ATM ProcessingJanuary 31, 2008 Information Exchange

Comdata Processing Systems Payment ProcessingAugust 31, 2007 K3DES

Commerciant Payment ProcessingOctober 31, 2007 Trustwave

Communications Data Services Order FulfillmentMay 31, 2007 RSM McGladrey

Complianthost.com, a GSI Service Offering

Data-Center HostingJuly 31, 2008 Solutionary

Managed Hosting

Physical Security

Comstar Interactive Internet Payment ProcessingApril 30, 2008 Trustwave

Mobile Payment Processing

Wireless Payment Processing

Concord EFS, a First Data Company

Payment ProcessingAugust 31, 2007 Trustwave

Concord Emerging Technologies, a First Data Company

Merchant Payment ProcessingAugust 31, 2007 Trustwave

Concord Payment Services, a First Data Company

Payment ProcessingAugust 31, 2007 Trustwave

Concur Travel Profile ServicesFebruary 28, 2008 Self-Assessment

5 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 6: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Consumer Benefit Services Loyalty ProgramsMarch 31, 2008 Trustwave

Convergys CCMS Customer Relationship ManagementApril 30, 2008 Fortrex Technologies

Convergys Encore Account Billing ServicesMarch 31, 2008 Fortrex Technologies

Convergys Speechport IVR Payment ProcessingApril 30, 2008 Fortrex Technologies

CO-OP Financial Services ATM ProcessingApril 30, 2008 Tevora Business Solutions Inc

Dispute Resolution

Credit Discovery Report ProcessingDecember 31, 2007 K3DES

Credit Management Group Rewards 660November 30, 2007 Self-Assessment

Credit Union Card Center (ICUL Services Corporation)

Credit Card ServicesNovember 30, 2007 Self-Assessment

CreditCall Communications Ltd. Internet Payment ProcessingJanuary 31, 2008 Trustwave

CSG Systems Account Billing ServicesMarch 31, 2008 Solutionary

CSI Software Account Billing ServicesOctober 31, 2007 Trustwave

Cyber City Teleservices Call Center ServicesFebruary 28, 2008 CrimsonSecurity

Cybera Data TransmissionApril 30, 2008 IBM Internet Security Systems

CyberSource Corporation Internet Payment ProcessingAugust 31, 2008 CyberTrust

Verified by Visa Hosted Payer Authentication

Cygnus Payment GatewayFebruary 28, 2008 Trustwave

Cynergy Data Merchant Payment ServicesAugust 31, 2008 Information Exchange

Data Center of Arizona Call Center ServicesDecember 31, 2007 Self-Assessment

Data Delivery Services Web-based ReportingJuly 31, 2008 Trustwave

Data Stream ATM ProcessingFebruary 28, 2008 Information Exchange

DataCo Credit Card ServicesMay 31, 2008 BT INS

Dataline Systems Affinity Card ServicesDecember 31, 2007 Trustwave

DataPipe Co-Location HostingSeptember 30, 2007 Trustwave

Managed Hosting

Physical Security

Dataprose Bill Payment ProcessingJanuary 31, 2008 Backbone Security.com, Inc

Datawire Communication Network, a First Data Company

Payment Transmission ServicesDecember 31, 2007 Trustwave

Debit Technologies, Inc Customer Relationship ManagementMay 31, 2008 Information Exchange

Delphis Software Managed HostingNovember 30, 2007 Payment Software company (PSC)

Demandware Managed HostingJune 30, 2008 SecurityMetrics

6 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 7: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Deposit Computer Services, Inc Account Billing ServicesJuly 31, 2008 Self-Assessment

Dispute Resolution

DHD Media Internet Payment ProcessingJune 30, 2008 Trustwave

Digital Payment Technologies Payment ProcessingMay 31, 2008 Payment Software company (PSC)

Digital River Internet Payment ProcessingJuly 31, 2008 CyberTrust

Direct Mail Processors Merchant Payment ServicesFebruary 28, 2008 Fortrex Technologies

DST Output, LLC Payment ProcessingJanuary 31, 2008 FishNet Security

Ebocom, LLC Payment ProcessingApril 30, 2008 CyberTrust

eCommLink Debit Card ProcessingNovember 30, 2007 RSM McGladrey

Stored Value Card Processing

ECS/PayByComputer Internet Payment GatewayAugust 31, 2007 IGX Global

EDS Commercial Card Payment ProcessingMay 31, 2008 Trustwave

EDS Consumer Card Services Payment ProcessingSeptember 30, 2007 Trustwave

EDS Deposit Systems Payment ProcessingSeptember 30, 2007 Trustwave

EDS GM Card Vehicle Rewards Program

Rewards/Gift Card ProgramsJune 30, 2008 Trustwave

EDS Guidance Authorization Payment ProcessingNovember 30, 2007 Trustwave

EDS Merchant Acquirer Services Payment ProcessingSeptember 30, 2007 Trustwave

EDS Oregon eGovernment Managed Merchant HostingApril 30, 2008 Trustwave

EDS Pay for Convenience Internet Payment ProcessingApril 30, 2008 Trustwave

EDS Surveyor Report ProcessingJune 30, 2008 Trustwave

EFX Payment ProcessingMarch 31, 2008 T3i

Elan Financial Services Payment ProcessingApril 30, 2008 K3DES

Elan Financial Services (formerly GenPass)

Payment ProcessingJune 30, 2008 K3DES

Elan Financial Services Credit Card Issuing

Payment ProcessingNovember 30, 2007 Trustwave

Elavon (formerly NOVA) Payment ProcessingMay 31, 2008 Verisign

Electronic Clearing House (ECHO) Payment ProcessingSeptember 30, 2007 403 Labs

Electronic Merchant Systems Merchant Payment ProcessingApril 30, 2008 Trustwave

Electronic Payment Exchange (EPX)

Merchant Payment ProcessingApril 30, 2008 Payment Software Company (PSC)

Electronic Payments Inc Credit Card ServicesJuly 31, 2008 Information Exchange

Electronic Processing Services Merchant Payment ProcessingJanuary 31, 2008 Information Exchange

7 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 8: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Electronic Transaction Systems Corporation

Merchant Payment ProcessingJuly 31, 2007 Fortrex Technologies

Element Payment Services Payment ProcessingNovember 30, 2007 Information Exchange

Emergis Internet Payment GatewayJune 30, 2008 Trustwave

EMS Holland, a First Data Company

Payment ProcessingDecember 31, 2007 Trustwave

Encircle Payment ProcessingJuly 31, 2008 K3DES

Eperformax Centers Call Center ServicesMay 31, 2008 Hill & Associates

Epicenter Technologies Call Center ServicesFebruary 28, 2008 Controlcase

Epoch (a dba of Paycom.net) Internet Payment ProcessingNovember 30, 2007 Protiviti

eProcessing Network Internet Payment ProcessingApril 30, 2008 Trustwave

Mobile Payment Processing

POS Payment Processing

Epsilon Data Management Loyalty ProgramsAugust 31, 2008 CyberTrust

EVO Merchant Services Merchant Payment ProcessingJuly 31, 2007 Trustwave

Evolution Benefits Account Billing ServicesDecember 31, 2007 Self-Assessment

E-xact Transactions Merchant Payment ProcessingMay 31, 2008 Emergis

Excellence in Motivation Rewards/Gift Card ProgramsNovember 30, 2007 Information Exchange

Experian Information Solutions Credit ReportingSeptember 30, 2007 CyberTrust

ExtraMeasures Fraud and Risk AnalysisMay 31, 2008 PSC

EzGov Managed Merchant HostingNovember 30, 2007 IBM Internet Security Systems

Ezic, Inc. Payment ProcessingJuly 31, 2008 Information Exchange

Faith Direct Account Billing ServicesJuly 31, 2008 CrimsonSecurity

Farelogix Travel Profile ServicesApril 30, 2008 Self-Assessment

Fast Transact Inc Merchant Payment ProcessingMay 31, 2008 Contronl Case

Fidelity Information Services - (FIS) Chicago

Debit Card ProcessingNovember 30, 2007 IBM Internet Security Systems

Payment Processing

Fidelity Information Services - eFunds Prepaid Solutions

Payment ProcessingApril 30, 2008 Trustwave

Fidelity Information Services - Little Rock

Debit Card ProcessingMay 31, 2008 IBM Internet Security Systems

Payment Processing

Fidelity Information Services - Norcross GA

Payment ProcessingApril 30, 2008 IBM Internet Security Systems

8 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 9: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Fidelity Information Services - Plainview

Remittance ProcessingAugust 31, 2007 IBM Internet Security Systems

Fidelity Information Services Lisle - Remittance Processing

Remittance ProcessingNovember 30, 2007 IBM Internet Security Systems

Fidelity Information Services-St. Petersburg

Remittance ProcessingSeptember 30, 2007 IBM Internet Security Systems

Fifth Third Processing Solutions - Issuing and Switch-Providing Systems

Payment ProcessingJune 30, 2008 Trustwave

Fifth Third Processing Solutions-Acquiring Systems

Payment ProcessingJune 30, 2008 Trustwave

First American Payment Systems Merchant Payment ProcessingJune 30, 2008 IBM Internet Security Systems

First Data Government Solutions Merchant Payment ProcessingDecember 31, 2007 Trustwave

First Data International-ANZSA (Australia)

Merchant Payment ProcessingAugust 31, 2007 Trustwave

First Data International-CAN (China)

Merchant Payment ProcessingAugust 31, 2007 Trustwave

First Data International-Deutschland (Germany)

Merchant Payment ProcessingAugust 31, 2007 Trustwave

First Data International-Hellas (Greece)

Merchant Payment ProcessingDecember 31, 2007 Trustwave

First Data International-LAC (Latin American & Canada)

Merchant Payment ProcessingDecember 31, 2007 Trustwave

First Data International-Latvia Merchant Payment ProcessingDecember 31, 2007 Trustwave

First Data International-Lithuania Merchant Payment ProcessingDecember 31, 2007 Trustwave

First Data International-OmniPay Limited

Payment ProcessingDecember 31, 2007 Trustwave

First Data International-TeleCash (Germany)

Merchant Payment ProcessingOctober 31, 2007 Trustwave

First Data International-UK (Basildon)

Merchant Payment ProcessingDecember 31, 2007 Trustwave

First Data International-UK (Hellaby, formerly Active Resources)

Merchant Payment ProcessingDecember 31, 2007 Trustwave

First Data Merchant Services Payment ProcessingDecember 31, 2007 Trustwave

First Data Resources Payment ProcessingJanuary 31, 2008 Trustwave

First Data Retail ATM Services (formerly known as Concord Processing)

ATM ProcessingAugust 31, 2007 Trustwave

First Hawaiian Bank Payment ProcessingJuly 31, 2008 Trustwave

9 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 10: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

First Horizon Merchant Services Payment ProcessingOctober 31, 2007 CyberTrust

First National Bank of Omaha Payment ProcessingJanuary 31, 2008 Trustwave

First National Merchant Solutions Payment ProcessingJanuary 31, 2008 Trustwave

First National Technology Solutions

Co-Location HostingMarch 31, 2008 Trustwave

Managed Hosting

Physical Security

FirstBank Data Corporation Payment ProcessingAugust 31, 2008 CyberTrust

Fiserv Credit Processing Services Payment ProcessingJuly 31, 2007 Payment Software Company (PSC)

Fiserv EFT Payment ProcessingMarch 31, 2008 Payment Software Company (PSC)

Florida Credit Union League Back Office Charge-backsApril 30, 2008 Self-Assessment

Florists’ Transworld Delivery Inc. Merchant Payment ProcessingMarch 31, 2008 Halock Security

FMS Inc. Debt Collection AgencyMay 31, 2008 Self-Assessment

Fort Knox National Company Internet Payment GatewayMay 31, 2008 CyberTrust

Fosdick Fulfillment Order FulfillmentJuly 31, 2008 Trustwave

Four51 Merchant Payment ProcessingFebruary 29, 2008 Solutionary

Fry Inc. Managed Merchant HostingMay 31, 2008 IBM Internet Security Systems

FSV Payment Systems Payment ProcessingMay 31, 2008 K3DES

Fulfillment Technologies Order FulfillmentNovember 30, 2007 Verisign

Galileo International Global Distribution SystemFebruary 28, 2008 Trustwave

Galileo Processing Merchant Payment ProcessingJuly 31, 2008 Trustwave

GC Services Internet Payment GatewayOctober 31, 2007 K3DES

Global Card Services Merchant Payment ProcessingMay 31, 2008 CyberTrust

Global Cash Access Payment ProcessingJuly 31, 2008 Digital Resources Group (DRG)

Global Collect Services Internet Payment ProcessingFebruary 28, 2008 Trustwave

Global Electronic Technology Internet Payment ProcessingJanuary 31, 2008 403 Labs

Global Payments, Inc. Payment ProcessingJuly 31, 2008 Trustwave

Global Technology Partners LLC Prepaid Card ProcessingJune 30, 2008 Coalfire

GlobalPayNet Payment ProcessingAugust 31, 2008 SecurityMetrics

Go Daddy Internet Payment GatewayOctober 31, 2007 Trustwave

Managed Merchant Hosting

Goconcierge.net Order FulfillmentJuly 31, 2008 Self-Assessment

10 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 11: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

GoEmerchant Internet Payment ProcessingMay 31, 2008 IBM Internet Security Systems

Golden Retriever Systems Loyalty ProgramsApril 30, 2008 Trustwave

Google Internet Payment ProcessingJanuary 31, 2008 Core Security

Govolution Internet Payment ProcessingMay 31, 2008 IBM Internet Security Systems

Green Dot Prepaid Card ProcessingAugust 31, 2007 403 Labs

GSI Commerce Solutions Managed HostingSeptember 30, 2007 Trustwave

Hamer Technologies Payment GatewayDecember 31, 2007 SecurityMetrics

Harbor Payments Payment ProcessingSeptember 30, 2007 CyberTrust

Harland Clarke Direct MarketingOctober 31, 2007 IBM Internet Security Systems

Order Fulfillment

Harland Financial Solutions ATM ProcessingAugust 31, 2008 Crowe Chizek

Debit Card Processing

Payment Gateway

Harris Connect Managed HostingDecember 31, 2007 Trustwave

Harte-Hanks Direct MarketingJune 30, 2008 Trustwave

Targeted Marketing

Heartland Payment Systems Payment ProcessingApril 30, 2008 Trustwave

HostMySite.com Co-Location HostingApril 30, 2008 Self-Assessment

Physical Security

Hughes Network Systems Payment Transmission ServicesOctober 31, 2007 IBM Internet Security Systems

Humboldt Merchant Services Merchant Payment ProcessingOctober 31, 2007 SecurityMetrics

I.C. System Inc Account Management ServicesJuly 31, 2008 Self-Assessment

I_Tech Corporation ATM ProcessingJuly 31, 2008 Crowe Chizek

Debit Card Processing

i2c Incorporated Stored Value Card ManagementSeptember 30, 2007 Trustwave

IATS Ticketmaster Canada Merchant Payment ProcessingJune 30, 2008 Trustwave

ICT Group Customer Relationship ManagementOctober 31, 2007 Crimson Security

ID Analytics, Inc. Predictive Scoring for Identity Risk Management

June 30, 2008 Computer Task Group

iKobo Targeted MarketingJune 30, 2008 Self-Assessment

InComm Prepaid Card ProcessingDecember 31, 2007 IBM Internet Security Systems

Private Label Cards and Bank-Issued Transactions

Infinity Data Merchant Payment ProcessingOctober 31, 2007 Information Exchange

Infonox Merchant Payment ProcessingNovember 30, 2007 Digital Resources Group (DRG)

11 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 12: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Informed Decisions Merchant Payment ProcessingDecember 31, 2007 Trustwave

Innovative Gateway Solutions (IGS)

Merchant Payment ProcessingSeptember 30, 2007 Trustwave

Innovative Merchant Solutions (IMS)

Merchant Payment ProcessingSeptember 30, 2007 Trustwave

InstaMed Communications Payment ProcessingFebruary 28, 2008 Trustwave

Integrated Payment Systems (IPS) Denver, a First Data Company

Payment ProcessingFebruary 28, 2008 Trustwave

Intellipay Merchant Payment ProcessingFebruary 28, 2008 Trustwave

Intercept Payment ProcessingOctober 31, 2007 Coalfire

International Card Establishment Fraud and Risk AnalysisApril 30, 2008 Self-Assessment

International Merchant Services Fraud and Risk AnalysisApril 30, 2008 Trustwave

Interplx Technologies Expense ManagementDecember 31, 2007 Self-Assessment

IntraISP Software Solutions, LLC Internet Payment ProcessingMay 31, 2008 Trustwave

Intuition Systems Payment GatewayOctober 31, 2007 SecurityMetrics

iPass, Inc. Payment Transmission ServicesAugust 31, 2008 Digital Resources Group (DRG)

iPayment Merchant Payment ProcessingJune 30, 2008 Trustwave

iQor Call Center ServicesFebruary 28, 2008 CrimsonSecurity

IRN Payment Systems Account Management ServicesFebruary 28, 2008 Information Exchange

Iron Mountain Off Site Data ProtectionMay 31, 2008 CyberTrust

Records Management

Secure Shredding

ITA Software Merchant Payment ProcessingJune 30, 2007 Trustwave

iTransact Internet Payment ProcessingMay 31, 2008 SecurityMetrics

ITS Bank - Shazam Network Payment ProcessingApril 30, 2008 Trustwave

JetPay, LLC Payment ProcessingApril 30, 2008 Trustwave

Jettis Internet Payment GatewayJuly 31, 2007 Verisign

JPMorgan Xign Payment GatewayJuly 31, 2008 Trustwave

K/P Corporation Managed HostingApril 30, 2008 Self-Assessment

Order Fulfillment

Keynetics Merchant Payment ServicesMarch 31, 2008 Trustwave

Kincaid Technologies Merchant Payment ProcessingJuly 31, 2007 Trustwave

Kubra Data Transfer, Inc. Merchant Payment ProcessingJuly 31, 2008 Trustwave

12 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 13: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Lethoff, Inc. Merchant Payment ProcessingNovember 30, 2007 CyberTrust

Lighthouse1 Health Savings Account ServicesJuly 31, 2008 Self-Assessment

Link2Gov Federal, State, and County Tax Payments

February 28, 2008 Trustwave

LinkPoint International, a First Data Company

Merchant Payment ProcessingDecember 31, 2007 Trustwave

Litle & Co Merchant Payment ProcessingApril 30, 2008 Payment Software Company (PSC)

Logitek Payment ProcessingSeptember 30, 2007 Trustwave

LOTSolutions / Life of the South Merchant Payment ServicesJune 30, 2008 Trustwave

Lundquist Consulting Bankruptcy Notification ServicesDecember 31, 2007 Trustwave

M & T Bank Payment ProcessingMay 31, 2008 BT INS

Magic Wrighter Payment ProcessingJuly 31, 2008 Trustwave

Maritz Loyalty Marketing Loyalty ProgramsDecember 31, 2007 IBM Internet Security Systems

Marketworks Order FulfillmentApril 30, 2008 Trustwave

Report Processing

Maverick Network Solutions, Inc Payment ProcessingJuly 31, 2008 SecureIT

MBS Insight, Inc Database Marketing ServicesMay 31, 2008 K3DES

MegaPath (formerly Netifice Communications)

Payment Transmission ServicesJanuary 31, 2008 Trustwave

Mellon Bank Payment ProcessingMay 31, 2008 Protiviti

Merchant e-Solutions Merchant Payment ProcessingJanuary 31, 2008 Digital Resources Group (DRG)

Merchant Link, LLC Merchant Payment ProcessingJanuary 31, 2008 Trustwave

Merchant Partners Merchant Payment ProcessingJuly 31, 2008 403 Labs

Merchant Plus Payment GatewayJuly 31, 2008 Trustwave

Payment Processing

Merchant Processing International Credit Card ServicesApril 30, 2008 Self-Assessment

Merchant Service Center Merchant Payment ServicesNovember 30, 2007 Information Exchange

Merchants Billing Services Merchant Payment ProcessingNovember 30, 2007 Information Exchange

Mercury Payment Systems Merchant Payment ProcessingMarch 31, 2008 Coalfire

Merlin Solutions, LLC ChargebacksApril 30, 2008 Trustwave

Dispute Resolution

Meta Payment Systems IssuerApril 30, 2008 Trustwave

13 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 14: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Metavante Corporation-Acquiring Solutions, ATM Driving & Gateway Services

ATM ProcessingApril 30, 2008 Trustwave

Payment Gateway

Metavante Corporation-Issuing Solutions, Debit Account, Healthcare Payment Card, and Prepaid Card Solutions

Debit Card ProcessingApril 30, 2008 Trustwave

Metavante-Credit Card and Merchant Transaction Processing

Merchant Payment ProcessingApril 30, 2008 Trustwave

MHM Resources Employee Benefits ProgramsAugust 31, 2007 Self-Assessment

Micros Systems, Inc. Managed HostingJanuary 31, 2008 Trustwave

Millennium Communications Inc. Managed HostingApril 30, 2008 Self-Assessment

Minacs Worldwide Inc. April 08, 2008 Trustwave

Modern Payment Solutions Account Billing ServicesDecember 31, 2007 CyberTrust

Moneris Payment ProcessingJuly 31, 2008 Dyntek

Money Centers of America EFT ProcessingDecember 31, 2007 K3DES

MoneyTree ATM ATM ProcessingApril 30, 2008 Information Exchange

Montrose Travel Bill Payment ProcessingJuly 31, 2008 Self-Assessment

Travel Profile Services

mPay Gateway Prepaid Card ProcessingAugust 31, 2007 SecurityMetrics

Mtrex (Vision Bankcard, Inc.) Merchant Payment ServicesFebruary 28, 2008 Trustwave

Payment Processing

MTXEPS Payment ProcessingSeptember 30, 2007 Trustwave

Multi Service Corp Private Label Cards and Bank-Issued Transactions

February 28, 2008 Trustwave

National Bankcard Services Payment ProcessingNovember 30, 2007 RSM McGladrey

National Card Services Stored Value Card ManagementSeptember 30, 2007 K3DES

National Electronics Warranty Claim ServicesJune 30, 2008 Self-Assessment

Visa Cardholder Enhancement Management Services

National Merchant Center Merchant Payment ProcessingMarch 30, 2008 Digital Resources Group (DRG)

Nationwide Payment Solutions Payment Transmission ServicesNovember 30, 2007 Information Exchange

Navitaire Payment ProcessingDecember 31, 2007 Trustwave

NBS Technologies Payment Solutions

Merchant Payment ProcessingSeptember 30, 2007 CyberTrust

NCMIC Finance Corporation Merchant Payment ServicesOctober 31, 2007 SecurityMetrics

14 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 15: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

NCO Group Account Management ServicesJanuary 31, 2008 Verizon Business – Security

Nelnet Business Solutions, Inc Merchant Payment ProcessingApril 30, 2008 Trustwave

NETBilling Account Billing ServicesJuly 31, 2007 SecurityMetrics

NetSpend Prepaid Card ProcessingDecember 31, 2007 Verisign

NetSuite Internet Payment ProcessingJanuary 31, 2008 Trustwave

Network Merchants Internet Payment ProcessingMarch 31, 2008 Trustwave

Network Solutions (MonsterCommerce)

Merchant Payment ProcessingOctober 31, 2007 Payment Software Company (PSC)

New Edge Networks Payment Transmission ServicesJuly 31, 2008 Trustwave

Newtek Merchant Services Merchant Payment ProcessingOctober 31, 2007 SecurityMetrics

Nobel Electronic Transfer Payment ProcessingJuly 30, 2007 K3DES

NoCheck Account Billing ServicesAugust 31, 2007 TruArx

North American Bancard Payment ProcessingSeptember 30, 2007 Information Exchange

NXGEN A Transaction Company Fraud and Risk AnalysisJuly 31, 2007 Self-Assessment

NYCE Payments Network, LLC Payment ProcessingApril 30, 2008 Trustwave

Obopay Mobile Payment ProcessingMay 31, 2008 IBM Internet Security Systems

Official Payments Corporation Federal, State, and County Tax Payments

February 28, 2008 Trustwave

Payment Processing

OMS Online, LLC Managed Merchant HostingJune 30, 2008 SecurityMetrics

Order Fulfillment

OneBridge, Inc. Payment ProcessingAugust 31, 2008 Crowe Chizek

Online Resources Card and Credit Services

Web-based ReportingOctober 31, 2007 Trustwave

Opticard Payment Services Inc. Prepaid Card ProcessingApril 30, 2008 Information Exchange

Private Label Cards and Bank-Issued Transactions

Stored Value Card Processing

Optimal Payments Merchant Payment ProcessingJune 30, 2008 Trustwave

Oracle on Demand Managed Merchant HostingAugust 31, 2008 Coalfire

ORCC - eCommerce Division: Columbus

Merchant Payment ServicesMay 31, 2008 Trustwave

ORCC - eCommerce Division: Princeton

Merchant Payment ProcessingMay 31, 2008 Trustwave

OrderMotion Order FulfillmentMay 31, 2007 Jefferson Wells

15 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 16: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

OrderTalk Internet Payment ProcessingJune 30, 2007 Trustwave

Paciolan, Inc. Merchant Payment ProcessingOctober 31, 2007 Trustwave

Palm Coast Data Order FulfillmentJanuary 31, 2008 K3DES

PAMS Lunchroom LLC Expense ManagementAugust 31, 2008 Self-Assessment

PassPort EFT Solutions ATM ProcessingDecember 31, 2007 Trustwave

Pay DQ Merchant Payment ProcessingNovember 30, 2007 Solutionary

Pay Simple Gift Card ProcessingJune 30, 2008 Coalfire

Payment Processing

PayByTouch Solutions - Delaware Payment ProcessingJuly 31, 2007 Trustwave

Paycom Billing Services (dba Epoch)

Internet Payment ProcessingNovember 30, 2007 Protiviti

PayConnexion Bill Payment ProcessingApril 30, 2008 Jefferson Wells

PAYjr Internet Payment GatewayOctober 31, 2007 Information Exchange

PayJunction Merchant Payment ProcessingApril 30, 2008 Payment Software Company (PSC)

Payment Clearing Internet Payment ProcessingMay 31, 2008 SecurityMetrics Inc.

Payment Data Systems Private Label Cards and Bank-Issued Transactions

May 31, 2008 Trustwave

Payment Processing, Inc. Merchant Payment ProcessingApril 30, 2008 Trustwave

Paymetric Internet Payment GatewayAugust 31, 2008 Trustwave

PayPal Internet Payment ProcessingDecember 31, 2007 IBM Internet Security Systems

PayPoint Electronic Payment Systems, a First Data Company

Payment ProcessingAugust 31, 2007 Trustwave

PayTrace Internet Payment GatewayAugust 31, 2008 Information Exchange

PEMCO Payment ProcessingJune 30, 2008 Coalfire

PeopleSupport GCA Call Center ServicesOctober 31, 2007 Verisign

PeopleSupport-Costa Rica Call Center ServicesMay 31, 2008 Verisign

PFSweb, Inc. Order FulfillmentApril 30, 2008 Trustwave

Pipeline Data Payment ProcessingSeptember 30, 2007 Trustwave

Planet eShop Payment ProcessingOctober 31, 2007 Information Exchange

Planet Payment Multi-Currency Payment ProcessingMarch 31, 2008 Trustwave

Plug & Pay Technologies, Inc. Internet Payment ProcessingJune 30, 2008 SecurityMetrics

POS Portal Merchant Payment ProcessingAugust 31, 2008 Coalfire

POST Integrations, Inc. Payment ProcessingApril 30, 2008 CyberTrust

16 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 17: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Prairie Interactive Messaging Payment GatewayMay 31, 2008 Solutionary

Preferred Health Payment ProcessingAugust 31, 2008 Trustwave

Premiere Global Services Records ManagementApril 30, 2008 Trustwave

Prestige International Issuing ProcessingAugust 31, 2008 Self-Assessment

Presto ATM ProcessingNovember 30, 2007 Solutionary

Priority Payment Systems Merchant Payment ProcessingApril 30, 2008 SecurityMetrics

Process America Payment ProcessingSeptember 30, 2007 Information Exchange

Profit Margins, Inc. Direct MarketingDecember 31, 2007 Self-Assessment

Progressive Distribution Merchant Payment ProcessingApril 30, 2008 Janus Associates

ProPay USA, Inc. Internet Payment ProcessingJune 30, 2008 SecurityMetrics

MOTO Payment Processing

Propco Marketing Call Center ServicesApril 30, 2008 Self-Assessment

PropertyBridge Merchant Payment ProcessingMarch 31, 2008 SecurityMetrics

PSCU Financial Services, Inc. Bill Payment ProcessingFebruary 28, 2008 Verizon Business

Dispute Resolution

PSIGate Internet Payment GatewayApril 30, 2008 Trustwave

Pulse Network LLC Payment ProcessingJuly 31, 2008 K3DES

Qgiv Payment ProcessingMay 31, 2008 SecurityMetrics

QS/1 Payment ProcessingJune 30, 2008 Trustwave

Quantum Services Payment GatewayOctober 31, 2007 Raven Eye

Quickbooks Merchant Services Merchant Payment ProcessingSeptember 30, 2007 Trustwave

Radiant Systems Payment ProcessingOctober 31, 2007 Trustwave

RBS Lynk Payment ProcessingJuly 31, 2008 Trustwave

Ready Financial Group Customer Relationship ManagementJuly 31, 2008 Self-Assessment

Receivable Management Services Call Center ServicesJune 30, 2007 Trustwave

Debt Collection Agency

RegOnline Account Management ServicesApril 30, 2008 Coalfire

RemitCo, a First Data Company Merchant Payment ProcessingAugust 31, 2007 Trustwave

RentPayment Bill Payment ProcessingApril 30, 2008 SecurityMetrics

Resurgent Capital Services Bankruptcy Notification ServicesAugust 31, 2008 Protiviti

Credit Card Services

RevTrak, Inc Internet Payment ProcessingApril 30, 2008 SecurityMetrics, Inc

Rewards Network Rewards/Gift Card ProgramsJuly 31, 2008 Sunera

17 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 18: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

RocketGate Payment ProcessingOctober 31, 2007 403 Labs

RT Lawrence Bill Payment ProcessingApril 30, 2008 Trustwave

Payment Processing

Sabre, Inc. Global Distribution SystemMarch 31, 2008 Jefferson Wells

Sage Payment Solutions (formerly Verus Card Services)

Merchant Payment ProcessingJuly 31, 2008 CyberTrust

Sallie Mae Managed HostingApril 30, 2008 FishNet Security

School-Link Technologies Stored Value Card ManagementApril 30, 2008 Coalfire

Secure Electronic Transmissions Payment Transmission ServicesAugust 31, 2007 Solutionary

SecureNet Internet Payment GatewayJune 30, 2008 Fortrex Technologies

Sequoia Retail Systems Data-Center HostingJuly 31, 2008 Self-Assessment

Physical Security

Servebase Payment ProcessingSeptember 30, 2007 One-Sec

ServiceU Internet Payment ProcessingApril 30, 2008 K3DES

SHC Direct Loyalty ProgramsApril 30, 2008 Trustwave

Shift4 Merchant Payment ProcessingMay 31, 2008 Trustwave

SIA Select Services Check ProtectionDecember 31, 2007 Self-Assessment

New Merchant Accounts

Rewards/Gift Card Programs

Signature Card Services Customer Relationship ManagementOctober 31, 2007 SecurityMetrics

Simmons First National Bank Payment ProcessingSeptember 30, 2007 Trustwave

SITA Global Distribution SystemApril 30, 2008 IBM Internet Security Systems

Skipjack Financial Services County Tax PaymentsFebruary 28, 2008 Trustwave

Internet Payment Processing

Skylight Financial, Inc. Debit Card ProcessingJune 30, 2008 Information Exchange

SlimCD Merchant POS ProcessingSeptember 30, 2007 Enterprise Risk Management

SoundBite Communications Credit Card Account ServicingAugust 31, 2007 Self-Assessment

Southern Datacomm Merchant Payment ProcessingSeptember 30, 2007 Trustwave

Speedpay (AKA Western Union Payment Services)

Merchant Payment ProcessingDecember 31, 2007 Trustwave

Spendvision Account Management ServicesApril 30, 2008 Symantec

Springbok Payment ProcessingSeptember 30, 2007 K3DES

Stamps.com Internet Payment ProcessingAugust 31, 2008 Trustwave

18 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 19: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

STAR Networks, Inc. (Northeast, Southeast and West Platforms), a First Data Company

Payment ProcessingAugust 31, 2007 Trustwave

Star Processing Services, Inc. (Northeast Platform), a First Data Company (formerly listed as STAR Networks)

Payment ProcessingAugust 31, 2007 Trustwave

Star Systems, Inc. (Southeast and West Platforms), a First Data Company (formerly listed as STAR Networks)

Payment ProcessingAugust 31, 2007 Trustwave

Stark Brother's Fulfillment Services Order FulfillmentApril 30, 2008 Trustwave

Sterling Payment Technologies Merchant Payment ProcessingAugust 31, 2007 Trustwave

Web-based Reporting

Strategic Profits Payment ProcessingApril 30, 2008 MTS Allstream

Strobe Back Office Services for marketing and collection

January 31, 2008 Self-Assessment

Sunbelt Fulfillment Services Publication FulfillmentApril 30, 2008 Self-Assessment

T.K. Keith Company, Inc. (dba Primax)

Payment ProcessingJuly 31, 2008 CyberTrust

TCIM Services, Inc. Bill Payment ProcessingSeptember 30, 2007 Self-Assessment

Credit Card Account Servicing

TeleCheck International Inc., a First Data Company

Payment ProcessingAugust 31, 2007 Trustwave

Teleflora Payment ProcessingFebruary 28, 2008 Trustwave

Teleperformance Mexico Customer Relationship ManagementMarch 31, 2008 Tevora Business Solutions

Teleperformance USA Customer Relationship ManagementFebruary 28, 2008 Tevora Business Solutions

Telvista Payment ProcessingJanuary 31, 2008 Trustwave

TermNet Merchant Services Payment ProcessingJune 30, 2008 Trustwave

TERREMARK WORLDWIDE, INC. (Data Return)

Managed HostingOctober 31, 2007 Verisign

The Members Group Payment ProcessingJanuary 31, 2008 RSM McGladrey

Thermeon, Corporation Payment GatewayApril 30, 2008 Tevora Business Solutions

Ticketmaster, Inc Merchant Payment ProcessingJune 30, 2008 Trustwave

Tier Technologies Internet Payment ProcessingApril 30, 2008 VeriSign

IVR Payment Processing

Time Customer Service Order FulfillmentJuly 31, 2008 Symantec

TNS Smart Network Payment ProcessingFebruary 28, 2008 Trustwave

19 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 20: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

Toccata April 30, 2008 PSC

Total Merchant Services Merchant Payment ProcessingFebruary 28, 2008 Information Exchange

TouchNet Internet Payment ProcessingApril 30, 2008 Trustwave

Town and North Bank Credit Card Services

Account Management ServicesFebruary 28, 2008 Trustwave

TPG TELEMANAGEMENT, INC Customer Relationship ManagementSeptember 30, 2007 Self-Assessment

TranLogix, Inc Federal, State, and County Tax Payments

April 30, 2008 Trustwave

Internet Payment Gateway

Loyalty Programs

Stored Value Card Processing

Transaction Network Services (Dialect)

Payment ProcessingJune 30, 2008 Vectra Corporation (AP Assessor)

Transaction Network Services (TNS)

Payment ProcessingJune 30, 2008 Trustwave

Payment Transmission Services

Transaction Payment Systems (TPS NJ)

Payment ProcessingSeptember 30, 2007 Trustwave

Transaction Transport Technologies (T3)

Payment GatewayJuly 31, 2008 Trustwave

Payment Processing

Payment Transmission Services

Transcontinental Direct Mail Gard Order FulfillmentApril 30, 2008 Crimson Security

TransFirst Merchant Payment ProcessingMay 31, 2008 Trustwave

TransVerse Systems April 30, 2008 INFORMATION EXCHANGE, INC

Tranzact Direct MarketingMay 31, 2008 Verisign

TrustCommerce Merchant Payment ProcessingApril 30, 2008 403 Labs

TSYS (Issuing Processing) Payment ProcessingJanuary 31, 2008 Trustwave

TSYS Acquiring Solutions (formerly Vital Processing Services)

Payment ProcessingApril 30, 2008 Trustwave

TSYS Debt Management Debt Collection AgencyJuly 31, 2008 Self-Assessment

TSYS Loyalty (IM Platform) Loyalty ProgramsJuly 31, 2008 Trustwave

TSYS Loyalty (TLP Platform) Loyalty ProgramsJuly 31, 2008 Trustwave

TSYS Prepaid Prepaid Card ProcessingJuly 31, 2008 Trustwave

TSYS Procard Expense ManagementJanuary 31, 2008 Trustwave

Twin Oaks Account Billing ServicesFebruary 28, 2008 Janus Associates

20 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 21: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

United Bank Card Credit Card ServicesJuly 31, 2008 Information Exchange

UniteU Technologies, Inc Payment GatewayAugust 31, 2008 SecurityMetrics

Universal Money Centers Inc. Payment ProcessingSeptember 30, 2007 Information Exchange

US Bank ATM Banking Payment ProcessingApril 30, 2008 K3DES

US Bank Credit Card Issuing Payment ProcessingNovember 30, 2007 Trustwave

US Bank E-Payment Service Internet Payment ProcessingJanuary 31, 2008 Trustwave

US Bank Gaming Services Payment ProcessingApril 30, 2008 K3DES

USA ePay Internet Payment ProcessingApril 30, 2008 Trustwave

USA Fulfillment, Inc. Order FulfillmentDecember 31, 2007 Verisign

USA Payment Systems Payment ProcessingDecember 31, 2007 K3DES

ValetPay Merchant Payment ProcessingSeptember 30, 2007 Fortrex Technologies

Vanco Services Merchant Payment ProcessingJanuary 31, 2008 SecurityMetrics

vCommerce Internet Payment GatewaySeptember 30, 2007 403 Labs

Ventanex April 30, 2008 Self-Assessment

VERePAY (formerly VEReFIED) Merchant Payment ProcessingOctober 31, 2007 Solutionary

Verifi ChargebacksJune 30, 2008 Trustwave

Risk Management

Verified by Visa Merchant Services

Verifone Merchant Payment ProcessingJune 30, 2008 Trustwave

Verifone Transportation Systems Mobile Payment ProcessingApril 30, 2008 Fortrex Technologies

Verizon Business (formerly MCI) Payment Transmission ServicesJanuary 31, 2008 Trustwave

Vesta Corporation Payment GatewayJune 30, 2008 Verisign

Vindicia Online Fraud Protection ServicesMarch 31, 2008 Payment Software Company (PSC)

VIPGift Gift Card ProcessingJuly 31, 2007 Self-Assessment

Stored Value Card Management

Visa, Inc. & Visa Data Processing Payment ProcessingAugust 31, 2008 Trustwave

Voice Data Solutions Payment ProcessingSeptember 30, 2007 Trustwave

Volusion Internet Payment GatewayJanuary 31, 2008 Payment Software Company (PSC)

WageWorks Prepaid Employee Benefits ProgramsApril 30, 2008 RSM McGladrey

Washington Metropolitan Area Transit Authority

Passenger TransportJune 30, 2008 ControlCase

Way Systems Mobile Payment ProcessingOctober 31, 2007 Jefferson Wells

WayPort Payment Transmission ServicesDecember 31, 2007 Trustwave

21 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.

Page 22: CISP List of CISP Compliant Service Providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... · Capital Card Services April 30, 2008 Credit Card Services Trustwave Card Management

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

Visa U.S.A. Cardholder Information Security Program (CISP)

List of Compliant Service Providers - All

West Business Services: WBS Data Vault

Call Center ServicesApril 30, 2008 Trustwave

Payment Gateway

West Direct - Direct Response Call Center ServicesApril 30, 2008 Trustwave

West Direct - Smartsell Direct MarketingOctober 31, 2007 Trustwave

West Interactive DataGuard IVR Payment ProcessingApril 30, 2008 Trustwave

West Telemarketing Corporation Call Center ServicesDecember 31, 2007 CyberTrust

World Access Service Corporation Visa Cardholder Enhancement Management Services

February 28, 2008 Trustwave

Worldspan Payment ProcessingOctober 31, 2007 BT INS

Xtec Managed HostingApril 30, 2008 Information Exchange

Yahoo! Stores Internet Payment ProcessingNovember 30, 2007 Symantec

YourPay, a First Data Company Merchant Payment ProcessingDecember 31, 2007 Trustwave

Zarlenga & Seltzer Inc Credit Card ServicesJuly 31, 2008 SecurityMetrics

Managed Hosting

22 of 22

(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2008 Visa U.S.A. Inc.

Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.

Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.