The company TxDOT hired to conduct its security risk assessment is Deloitte, which provides audits, consulting and financial advisory in over 100 countries around the world and has an office in Austin, according to its website.ĭeloitte is responsible for conducting a vulnerability assessment of about 100 webpages associated with TxTag and its payment system, according a work authorization contract signed by TxDOT on August 29. “These assessments are underway and an additional security assessment is being conducted by a third-party consultant hired by TxDOT while the PCI certification process is being completed.” “Conduent informed TxDOT that a data center transition delayed the timeline for completing the required assessments to renew PCI compliance certification,” TxDOT told KXAN. Instead, the state agency said there was a delay in its vendor’s renewal of certification, meaning the certification expired but it’s possible paperwork hasn’t been completed to renew it. That compliance is the minimum set of standards used to protect cardholder data, such as a customer’s name, card number, expiration date, magnetic stripe and chip or any other information stored on the card, said Lance Hayden, an adjunct assistant professor at the University of Texas School of Information and the UT Center for Identity, who teaches courses on information security and privacy. Conduent is contractually obligated to have PCI compliance to handle TxTag customer information.
However, TxDOT contracts with Conduent State & Local Solutions to handle all TxTag operations and after researching the vendor’s PCI status, we learned it lost compliance with Visa this past summer, and did not have compliance with Mastercard, according to those two companies’ websites. There have been no breaches or hacking of customer data at TxTag that we know of. PCI compliance is the standard used by the five major credit card companies – Visa, Mastercard, Discover, American Express and JCB – to process and store customers card information and ensure transactions are secure and safe from hacking or data breaches.
Yet they continue to process credit card payments and the agency is not holding them accountable for this contract breach.” “This is required to take credit card payments. “TxDOT’s toll contractor Conduent has lost PCI compliance certification,” said the tipster, whose employment KXAN verified using state records.
#TXTAG PAY ONLINE DRIVERS#
The whistleblower said he felt compelled to reach out to KXAN after seeing our reports of nearly $1 billion in late fees added to 2.2 million driver accounts as well as concerns with improper billing at TxTag, a system used by millions of drivers across the state. AUSTIN (KXAN) - After days of hearing management at the Texas Department of Transportation discuss potential concerns with the security of millions of tollway customers’ private information, one employee said he’s not pleased with how the state is handling it.
0 kommentar(er)
