Credit card data compliance not met by airlines

30/03/2009
A survey by airline industry specialist SITA has revealed a number of barriers in the airline industry to achieving regulatory data compliance in areas such as credit card data security. This finding came about despite two-thirds of airlines maintaining or increasing their IT security budgets.

Only 42% of the IT professionals polled have been involved with preparations for the Payment Card Industry Data Security Standard (PCI DSS), designed to improve security of online transactions. Some card issuers, such as Visa, have set compliance deadlines for later this year.

According to the survey, the main barriers to this area of data security compliance are insufficient resources (54%), budget (49%) and lack of knowledge (47%). This is despite the study showing that 34% of respondents saw their security budget staying the same while 25% had an increase of between 1% and 5%. Nearly one in ten IT professionals reported an increase of at least 6%.

Mark Prince, head of consulting for security, voice and convergence at SITA, commented: “The level of importance given to compliance by these airline IT security professionals is encouraging but more can be done.”