Visa USA: New Edge Networks Complies with PCI Security Standards

VANCOUVER, Wash.--(BUSINESS WIRE)--Aug. 29, 2006--For the second consecutive year, Visa USA Inc. has validated New Edge Networks for complying with Payment Card Industry security standards adapted by most credit card companies.

Full annual compliance with the PCI security standards assures merchants that accept card payments that broadband networks powered by New Edge Networks are private and secure. Last year, New Edge Networks was one of the first communications providers to achieve compliance.

“Building a secure network that does not touch the public Internet goes a long way in protecting a business from the cost and expense of dealing with a data breach”

In a letter to New Edge Networks, Visa wrote, "Although security can never be completely guaranteed, your efforts to maintain adherence to PCI data security requirements should reduce the ability of hackers to gain access to proprietary data... We see tremendous value in New Edge Networks' participation in this crucial security program, and in your continuing commitment to CISP (Cardholder Information Security Program) and to safeguarding the payment industry."

New Edge Networks undertook a rigorous audit of its information security policies, procedures, and systems including transport facilities and IT environment. The audit also included an on-site assessment of the company's network management center in Vancouver, Wash.

"Many merchants are unaware of the obligation to comply with the PCI requirement and its significance in combating fraud," said Greg Griffiths, vice president of marketing for New Edge Networks. "New Edge Networks regards securely transporting cardholder data over a private broadband network as our obligation to help our customers achieve full PCI compliance."

Merchants switch to broadband networks to speed up card payment transactions from 12 to 15 seconds over dial-up authorizations to about three seconds over a high-speed, always on connection. Faster transaction speeds improve customer experience, operating efficiency, and profitability.

Without strong data encryption, however, card transactions that traverse the public Internet are at risk of interception. PCI- compliant networks that New Edge Networks provides do not touch the Internet.

AmbironTrustWave, a Chicago-based firm that specializes in data security and compliance solutions and an authorized qualified data security company for all the card associations, conducted a comprehensive security review for New Edge Networks and submitted to Visa a report on behalf of the company. Visa affirmed the report. A list of PCI-compliant service providers is available at www.visa.com/cisp.

American Express, Discover, and MasterCard do not perform validation reviews if an approved security assessor recommends a company for full compliance.

"Building a secure network that does not touch the public Internet goes a long way in protecting a business from the cost and expense of dealing with a data breach," said Robert J. McCullen, chief executive officer of AmbironTrustWave.

The PCI security standards lay out requirements for securing networks, protecting cardholder data, and regularly auditing security systems. Merchants that do not comply face hefty fines or risk losing their privilege of accepting card payments.

About New Edge Networks

New Edge Networks builds and manages networks for businesses and communications providers. Through its nationwide backbone network with about 900 switches and Internet routers, New Edge Networks uses various access technologies (xDSL, frame relay, ATM, cable, wireless, and satellite) for providing broadband connectivity at any business address in the United States. Network options include any combination of access and network management functions. Based in Vancouver, Wash., New Edge Networks is a wholly-owned subsidiary of EarthLink Inc. (NASDAQ:ELNK). The company's Web site is www.newedgenetworks.com. Telephone: [phone].