In The News: TAG Continues Proactive Approach to Compliance and Data Security

March 7th, 2014

Here at The Affiliated Group, we remain committed to a proactive approach when it comes to issues of compliance and data security. This week we are proud to announce a significant step forward in terms of how we handle consumer information and cardholder data.

TECH LOCK, a PCI Qualified Security Assessor (QSA), announced this week that TAG has met the standards of an on-site PCI audit. From TECH LOCK's press release:

"TECH LOCK, Inc. announces that The Affiliated Group, Inc. (TAG), an industry-leading accounts receivable management company, has successfully met the stringent standards of an onsite PCI DSS audit conducted by a PCI Qualified Security Assessor (QSA). TAG, a company committed to customer service has moved away from the frequently seen PCI Self-Assessment Questionnaire (SAQ) to a PCI DSS onsite assessment normally required for Level 1 Merchants and Service Providers."

This assessment is not required of collection agencies. So why do it? TAG president/CEO Mark Neeb explains:

"It is no surprise that protection of consumer information and reputation risk is a large concern. TAG understands the importance of compliance and data security to our clients. Although an onsite PCI DSS assessment is not required of us, TAG is going above and beyond by having an independent third party audit of our controls protecting cardholder and consumer information."

Todd Langusch, TECH LOCK’s president and chief executive officer, said the following about the process:

"The TAG team is very in tune with the evolving requirements in the ARM Industry. 99 out of 100 companies will take the easy route and turn in their PCI DSS SAQ signed by a corporate officer. Unfortunately, 99 out of 100 times if those companies have not worked with a PCI QSA or do not have PCI Internal Security Assessors on staff, those SAQs are incorrectly completed. This puts cardholder data, consumer information, and trusted client reputation at risk."

TAG is thrilled to have taken this step, and we continue to look forward for opportunities to enhance what it means to be Proven, Professional, and Compliant.

Click here for more information on TECH LOCK, Inc.

Link: The Affiliated Group Taking a Compliance-First Approach to Collections; Retains TECH LOCK, Inc. to Perform Onsite PCI DSS Assessment (Inside Arm)