European Payment Initiative (EPI)
Your Partner for EPI Security Certification and Consulting
The European Payment Initiative (EPI)
Under the European Payments Initiative (EPI), 16 banks and financial service providers have joined forces with the common goal of offering a standardized digital payment service for all European companies and citizens. Until now, an efficient and secure EU-wide solution was lacking.
Wero
Sending and receiving money on the move in real time: “Wero” is EPI's wallet solution, which can either be integrated into the banking app for customers of participating banks or used with the Wero app.
In the future, the service is intended to facilitate payments for all types of retail transactions using a cell phone. Direct person-to-person transactions are already enabled for customers of participating banks in Germany. In-store and online payments are set to follow in the coming years.
Participation in EPI requires regular security certifications
EPI requires regular security certifications from banks and financial service providers who wish to enable their customers to pay or accept payments via Wero.
Depending on the role that the banks and financial service providers play in the EPI program, the form of security assessment required for certification differs:
- Consumer PSP
Initial on-site audit and regular follow-up audits by an accredited auditor (EPI Security Evaluator) - Acceptor PSP:
Self-Assessment
Technical service providers (TSPs) fall within the scope of an issuer or acquirer if they provide services relevant to EPI. This means that TSPs are also reviewed in the course of the security assessment.
usd as your EPI Security Evaluator
As an EPI-accredited External Security Evaluator, we carry out on-site audits for you. Of course, we are also on hand to advise you - both in preparation for the security assessment and during your self-assessment. You can rely on us:
Experience
Over 20 years of experience in international auditing and consulting projects in the payment card industry, complemented by comprehensive industry know-how in the European financial sector.
Full Service Provider
We cover the entire IT security value chain - from pentests to consulting and assessments.
Independence
Independent and objective security assessments. Our goal: more security, not product sales.
Practicality
The best recommendation is useless if its implementation is not practical. That's why our clients value our best practices and our realism.
