Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

I have not adopted all the guidelines in the EMVCo Security Guidelines in our current product as they are out of scope for the intended application. Is this an automatic fail?

April 26, 2017adopted application automatic emvco guidelines Product SCOPE security

0

Posted

I have not adopted all the guidelines in the EMVCo Security Guidelines in our current product as they are out of scope for the intended application. Is this an automatic fail?

1 Answer

0

Posted

The guidelines are not mandatory. If the security omissions are mitigated by other factors there may not be an issue. This should be discussed with the evaluation laboratory prior to and during the evaluation.