Windows XPiration: ATM security expert answers questions

Unless you were in a cave, you are probably aware that Microsoft is no longer supporting Windows XP. As you can imagine, a lot of folks had a lot of questions about "Windows XPiration." So, we’ve asked Owen Wild, global marketing director, security and compliance solutions for NCR Corporation, to answer the three most common questions we’ve encountered about the end of support for Windows XP.


Q. What does it mean when Microsoft says they’re no longer supporting the Windows XP operating system?

A. Microsoft will no longer issue security updates for Windows XP Professional; this means that customers may lose their PCI-Data Security Standard (PCI-DSS) compliance. Basically, XP’s security vulnerabilities will not be resolved or closed.


Q. What can customers do?

A. Customers have three main options. They can do nothing, which puts them at risk for losing their PCI compliance. They can implement what’s called “compensating controls” on unsupported machines as part of a plan to migrate to Windows 7. This is a recommended solution, and Solidcore Suite for APTRA has been identified as a compensating control. They can also purchase Custom Support from Microsoft, which enables them to continue receiving security updates from Microsoft. We do not recommend this option, as it is very expensive and is not guaranteed to be available from year-to-year.


Q. What does NCR recommend for its customers?

A. We recommend that while they are planning and implementing a Windows 7 migration, they should implement a compensating control such as Solidcore for APTRA. This strategy provides time to plan and execute a successful migration, while maintaining PCI-DSS compliance. And an investment in Solidcore will be lower cost than Microsoft Custom Support, especially after the first year, when Custom Support prices escalate sharply.


Additionally, Microsoft has more information on its website, the ATM Industry Association (ATMIA) has created an infographic on Windows XP discontinuation and migration options. If you are planning for your next software upgrade cycle, we can help. Simply contact your NCR sales representative, email or call 1-800-CALL NCR (1-800-225-5627).


Owen Wild is responsible for establishing the marketing strategies and enhancing the strength and market share of the NCR Security Solutions within NCR’s Financial Solution Portfolio. Over the past 15 years, Owen held several sales and marketing positions with some of the leading travel and technology companies in North America.