CHICAGO, IL and SHANGHAI, CHINA–(EMWNews – August 7, 2008) – Shanghai SAND Information

Technology System Co., Ltd. has selected Trustwave, the leading provider of

on-demand data security and payment card industry compliance management

solutions to businesses and organizations throughout the world, to validate

both POS Terminal and Integrated Primed System payment applications to meet

Visa’s Payment Application Best Practices (PABP) to meet the Payment Card

Industry Data Security Standard (PCI DSS).

Visa’s PABP applies to software vendors who develop payment applications

that store, process, or transmit cardholder data as part of authorization

or settlement. The annual security review consists of 14 PABP requirements,

including protection of card holder data, secure passwords, protection of

wireless transmissions, encryption of sensitive traffic over public

networks and more.

Trustwave will validate PS 100 series, PS 300 series and PS 400 series

payment terminals, all varieties of the POS Terminal. The units have

specific uses, ranging from simple dial-up to network integration using a

high-speed Internet connection. The Integrated Primed System can be used by

a single organization that has a concentrated group of payment terminals

such as a grocery store, or in a distributed environment in which a single

merchant has at least 20 PC-based POS applications in a variety of

locations.

“SAND’s priority is to maintain the highest level of security for our

payment application merchants and their customers, which can often be

difficult in a distributed environment with multiple applications at a

single location,” says Jinsong Ru, vice president of SAND Information

Technology System Co. “Adhering to Visa’s PABP to meet PCI DSS ensures that

we have secured our payment application terminals from the moment a

customer swipes their credit card through to the payment processor.”

“Validating PABP compliance demonstrates that the protection of cardholder

data is a mission-critical business requirement for SAND,” says Robert J.

McCullen, chairman and CEO of Trustwave. “Trustwave is helping SAND secure

merchant transactions at a time when consumers are more aware of risks

associated with sharing cardholder information at places they patronize.”

“In accordance with industry regulations and best practices, SAND is taking

the necessary steps to protect cardholder data using Trustwave’s full-suite

of proprietary technology to validate PABP compliance,” says Sophia Chen,

director of Northern Asia Pacific for Trustwave.

About Shanghai Sand Information Technology System Co.

Established in 1994, Shanghai Sand Information Technology System Co., Ltd

is located in Xuhui District, Shanghai with a registered capital of RMB

109,200,000, it was previously the sub hi-tech company of Shanghai

University. During the recent years, the company mainly dedicates to the

R&D and production of financial terminal equipment and multi medial

terminal equipment; it also provides system integration and technical

services for financial industry, telecom industry, and government etc.

About Trustwave

Trustwave is the leading provider of on-demand and subscription-based

information security and payment card industry compliance management

solutions to businesses and government entities throughout the world. For

organizations faced with today’s challenging data security and compliance

environment, Trustwave provides a unique approach with comprehensive

solutions that include its flagship TrustKeeper® compliance management

software and other proprietary security solutions. Trustwave has helped

more than 30,000 organizations — ranging from Fortune 500 businesses and

large financial institutions to small and medium-sized retailers — manage

compliance and secure their network infrastructure, data communications and

critical information assets. Trustwave is headquartered in Chicago with

offices throughout North America, South America, Europe, Africa, China and

Australia. For more information, visit https://www.trustwave.com/.