Connect with us

E-Financial

PCI SSC Pushes Back SSL-to-TLS Migration Deadline

Published

on

Kindly share this post

In response to “significant feedback” from the PCI community and security experts, the Payment Card Industry Security Standards Council (PCISSC) has extended its deadline for payments industry providers to migrate to TLS 1.1 (or higher) encryption. The date has been changed from June 2016 to June 2018, a press release said.

The original deadline appeared in the PCI Data Security Standard version 3.1, which the council published in April 2015. An updated version of the standard, expected in 2016, will use the new date.

“Early market feedback told us [that] migration to more secure encryption would be technically simple, and it was,” said PCI SSC General Manager Stephen Orfei. “But in the field, a lot of business issues surfaced as we continued dialog with merchants, payment processors and banks. …

“The global payments ecosystem is complex, especially when you think about how much more business is done today on mobile devices around the world. If you put mobile requirements together with encryption, the SHA-1 browser upgrade and EMV in the U.S., that’s a lot to handle. And it means it will take some time to get everyone up to speed. We’re working very hard with representatives from every part of the ecosystem to make sure it happens as before the bad guys break in.”

According to PCI SSC CTO Troy Leach, additional provisions of the PCI DSS also will change to ensure that new customers are outfitted with the most secure encryption.

In addition to the migration deadline update, changes to other aspects of the standard include:
 –   an updated deadline for payment service providers to begin offering more secure TLS 1.1 or higher encryption;
 –   a requirement that new implementations be based on TLS 1.1 or higher; and
  –  an exception to the deadline for payment terminals, or “points of interaction.”

A webinar recording provided by the PCI Security Standards Council provides additional information, as does the council’s “Bulletin on Migration,” which can be downloaded from the PCI SSC website.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Financial

ABCON, SEC Partner on Digital Currency P2P FX Sector Harmonization

Published

on

Kindly share this post

The Association of Bureau De Change Operators of Nigeria (ABCON) has called for the Securities and Exchange Commission (SEC) guidance and collaboration in harmonising the peer-to-peer forex sector in the country.

At an official courtesy visit to the newly appointed SEC Director-General, Dr. Timi Agama, the President of Association of Bureau de Change Operators of Nigeria (ABCON), Aminu Gwadabe, who congratulated the SEC D-G on his appointment, observed that SEC regulates the sector that continues to threaten the existence of BDCs in Nigeria through online virtual transactions platforms which give access to millions of Nigerians to trade in foreign exchange without trace and accountability.

He also explained that ABCON has invested in requisite technology to ensure the continued existence of the business and the preservation of the integrity of the sub-sector, stressing that the future of BDC’s business was digital currency. The ABCON boss said that the meeting with the SEC DG and his executive board was a follow up to an earlier online virtual consultation.

Gwadabe explained that ABCON, the umbrella body for all licensed retail foreign exchange dealers, was established in 1991 to liaise with regulators, relevant stakeholders and security agencies for a transparent retail end forex market.

Gwadabe said: “As at today, there are over 34 million Nigerians dealing in digital currency and the number is rising by about nine percent with a huge market of $9 billion annually. There are thousands of multichannel virtual currency FX platforms and none is indigenous to Nigeria, adding that P2P represents individual-to-individual transaction.

“To automate the entire foreign exchange retail market, ABCON has partnered with the Commodities Exchange Board in building the platform knowing that they have sources of foreign exchange. ABCON is willing to work with SEC towards achieving full automation of the retail end of the foreign exchange market in Nigeria.

 


Kindly share this post
Continue Reading

E-Financial

Crypto Exchanges Begin Delisting Naira from P2P Platforms- SEC

Published

on

Kindly share this post

Crypto exchanges have commenced delisting of the Naira from Peer-to-Peer (P2P) trading platforms, following directives of the Office of the National Security Adviser and the Securities and Exchange Commission (SEC).

Crypto Exchanges Begin Delisting Naira from P2P Platforms- SEC

P2P trading in the realm of cryptos is a decentralized method that allows individuals to buy and sell digital assets directly with one another.

In this system, P2P trading platforms serve as intermediaries, facilitating secure and trust-based transactions.

SEC explained that its checks have indicated that the Naira has been removed as a fiat currency option for transactions on KuCoin platform and the exchange has already begun the necessary adjustments to its technology to accommodate the delisting of the Naira as soon as practicable.

It explained that the removal of the Naira from the platforms limits the ability to manipulate the exchange rates against the Nigerian currency which is expected to further strengthen the value of the naira.

Dr. Emomotimi Agama, acting director general of SEC, reacting to the delisting by KuCoin, expressed delight that the crypto exchanges were heeding the directives of ONSA and SEC, describing it as a welcome development.

He stated: “We are happy that they have started complying with the directives by the ONSA.  We ask that those involved in sharp practices that undermine national interest should cease and desist. It is in our interest as a people to protect what belongs to us.  Anyone that disobeys directives should be ready to face the full weight of the law”.

Agama added that as the apex regulator of the capital market, “SEC is co-operating  with the Office of the National Security Adviser, the  Economic and Financial Crimes Commission (EFCC) and other relevant agencies to achieve the national objective of making sure that illegality is not allowed to thrive”.

 

 

 


Kindly share this post
Continue Reading

E-Financial

Court Backs Banks to Collect Customers’ Social Media Handles

Published

on

Kindly share this post

A federal high court in Lagos has struck out a case against the Central Bank of Nigeria (CBN) over its directive requiring banks to collect and verify social media handles as part of their know-your-customer (KYC) requirement.

Court Backs Banks to Collect Customers’ Social Media Handles

In June 2023, the apex bank issued the directive, saying the aim is to prevent financial crime, and terrorism, as well as boost the precision and thoroughness of customer identification.

Chris Eke, the applicant and a customer, represented by Olubunmi Abayomi-Olukunle, a lawyer, had filed suit number FHC/L/CS/1281/2023 in July 2023, arguing the CBN’s directive infringed upon constitutional rights, particularly section 37 of the 1999 constitution.

Nnamdi Dimgba, presiding judge, struck out the suit filed by Eke, which sought a declaration that the regulation as contained in section 6(a)(iv) of the CBN (customer due diligence) Regulations, 2023, is “undemocratic, unconstitutional, null and void”.

The CBN, in its response to the suit, filed a notice of preliminary objection, challenging the competence of the suit and disagreeing with the claim of interference with the applicant’s private life.

In his judgment, Dimgba held that the notice of preliminary objection had merit, subsequently striking out the suit.

The judge ruled that providing a social media handle is equivalent to providing email and phone numbers for potential customers, and therefore, it does not violate the right to privacy.

“First, the applicant claims that the requirements on the CBN regulations for financial institutions to request and collect the social media handle of its customers as part of KYC infringes on his right to privacy,” the judge said.

“This claim is very ambitious and amounts to a very far throw. The said regulations are directed to and apply to financial institutions.  It does not apply to private individuals such as the applicant.

“Even if, as appears to be argued, that the regulations itself would inevitably affect the applicant, this claim is speculative for the simple reason that in nowhere in the affidavit in support was it stated that the applicant operates an account with a financial institution and that the said institution had demanded his social media handle.”

Consequently, the judge said the suggestion that he would be negatively affected by the regulation is very “speculative and at large”.

He said there is a lack of evidence suggesting financial institutions have implemented the regulation, and it is causing disruptions and inconvenience.

Furthermore, Dimgba said if the applicant is “irritated by the requirement of the regulation”, he has a choice to “refuse to do business with any bank insisting on the information as part of its social media handle, but to seek other alternatives”.

PROVISION OF SOCIAL MEDIA HANDLES TO BANKS DO NOT TRANSLATE TO BREACH’

Dimgba said banks asking customers or potential clients to provide their social media handles is not a breach of privacy.

He said the essence of having a social media account was for one to be publicly visible communication-wise.

According to the judge, a social media handle, being in the public space, can be accessed by everyone whether or not consent was obtained.

As a result, he said it would be unreasonable to hold the respondent in breach of privacy.

“The apprehension of the Applicant of his social interactions being monitored is manifestly speculative in itself and rather incredulous to believe that the financial institutions have the luxury of time to concern itself with such frivolities,” the judge said.

 

 


Kindly share this post
Continue Reading

Trending