Call recording and PCI DSS Compliance

Discussions about new features or changes in existing features

Moderators: gerski, enjay, williamconley, Op3r, Staydog, gardo, mflorell, MJCoate, mcargile, Kumba, Michael_N

Call recording and PCI DSS Compliance

Postby umop3plsdn » Thu Jan 13, 2011 1:47 pm

I'm sure some of you are aware with PCI DSS and the struggle to not retain CVV2 data in call recordings if you are recording every call automatically. I was hoping to open up a thread to discuss ideas of how to get around this. Also, maybe someone out there has already conjured up a solution. My current thoughts are to maybe use MixMonitor and have some sort of interrupt functionality with StopMixMonitor and then use the append to the recording MixMonitor function. Also, the trigger will be an issue if an agent forgets to press a certain button but right now that's besides the point. A button solution would work for me right now. Anyway, I really hope that there are others out there experiencing these struggles so we can work together to provide a solution to make this wonderful product PCI DSS compliant!
umop3plsdn
 
Posts: 72
Joined: Wed Jul 26, 2006 9:47 am
Location: Maine

Postby mflorell » Thu Jan 13, 2011 2:01 pm

This is why we added the Park IVR feature to svn/trunk. The customer is parked(sent) to an IVR where they enter in their CC details so the agent can't hear it and it is not recorded, after entering in their details they go back to the agent.

This was done this way because the client that sponsored the development has mostly at home agents and according to PCI those agents cannot collect CC details.

As for removing CC details from existing recordings, we have a client that is working on a solution for this, but it is not in production yet.
mflorell
Site Admin
 
Posts: 18335
Joined: Wed Jun 07, 2006 2:45 pm
Location: Florida

Postby umop3plsdn » Thu Jan 13, 2011 2:25 pm

This is great news! I started checking out the feature from SVN. Is there an agi script that specifically deals with CC details or do I need to write my own based on park_call_IVR_example.agi? I don't mind writing my own by why redo work if it's already done and I can be pointed in the right direction. Thanks Matt!
umop3plsdn
 
Posts: 72
Joined: Wed Jul 26, 2006 9:47 am
Location: Maine

Postby mflorell » Thu Jan 13, 2011 4:39 pm

park_call_IVR_example.agi is an AGI file that you can start from for this.
mflorell
Site Admin
 
Posts: 18335
Joined: Wed Jun 07, 2006 2:45 pm
Location: Florida

Postby AlSam » Thu Jun 16, 2011 7:02 am

mflorell wrote:This is why we added the Park IVR feature to svn/trunk. The customer is parked(sent) to an IVR where they enter in their CC details so the agent can't hear it and it is not recorded, after entering in their details they go back to the agent.

This was done this way because the client that sponsored the development has mostly at home agents and according to PCI those agents cannot collect CC details.

As for removing CC details from existing recordings, we have a client that is working on a solution for this, but it is not in production yet.


Where can I get more info on how to use the Park IVR feature?
AlSam
 
Posts: 125
Joined: Thu Sep 02, 2010 1:17 pm

Postby mflorell » Thu Jun 16, 2011 8:38 am

You have to program it, or have it programmed for your specific needs.

You can contact the ViciDial Group(http://www.vicidial.com) or another Vicidial consultant to assist you in this.
mflorell
Site Admin
 
Posts: 18335
Joined: Wed Jun 07, 2006 2:45 pm
Location: Florida

Postby johnt » Wed Jul 20, 2011 4:34 pm

In regards to "removing CC details from existing recordings" did the customer who was trying this have any luck?
Multi Server Set Up (3 Ast/2 SQL)
VERSION: 2.8-440a
BUILD: 140521-2101
Asterisk - 1.4.21.2-vici
Ubuntu 8.04 LTS
70 seats
johnt
 
Posts: 71
Joined: Thu Jan 07, 2010 12:39 pm

Postby mflorell » Thu Jul 21, 2011 7:47 am

They said they would contact me when they got it working, that was 10 months ago, and I haven't heard that they were using it the last time I talked to them.
mflorell
Site Admin
 
Posts: 18335
Joined: Wed Jun 07, 2006 2:45 pm
Location: Florida


Return to Features

Who is online

Users browsing this forum: No registered users and 38 guests