client portal contact privacy policy
Delap LogoBridge at Mulnomah Falls
Multnomah Falls

“Darlene is without a doubt the BEST teacher and presenter I ever had the privilege of listening to! She makes all material understandable even though it is very complex.”
Read More Testimonials

Download the latest version of TR-39Member of ATM Industry Association National Registry of CPE Sponsors

Delap is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be addressed to the National Registry of CPE Sponsors, 150 Fourth Avenue North, Suite 7000, Nashville, TN 37219-2417.
Website: www.nasba.org

TR-39 (formerly TG-3) Compliance Classes

All classes are 'Group Live' and are held on site at the listed hotels.

Effective 2008, a passing grade is required for all auditors performing a TR-39 (formerly TG-3) review for PULSE or STAR Networks at the processor member level. Auditors receiving a passing grade will also receive a new designation -- CTGA. Examination criteria and relevant information will be provided through each network's normal communication methods. Exam time allowance is four hours. Delap offers the exam several times each year in conjunction with the classes.

Course Contents

Network Security Compliance for PIN and Key Management
Delap LLP

4-Day Core Class
(Basic class - no prerequisites or additional preparation required.)

The 4-day training course is designed to provide both internal and external auditors with the necessary tools to complete the NYCE Corporation, PULSE EFT Association and Star Systems Compliance Reviews.

2-Day Refresher Class
(Intermediate class. Prerequisite - 4 day core class. No additional preparation required.)

After attending the 4-day Core Class, a "refresher" class is required every 24 months. We offer both a 2-day refresher class and a 2-day Remote Key class as described below.

2-Day Remote Key Class
(Intermediate class. Prerequisite - 4 day core class. No additional preparation required.)

A 2-day class will be offered to address asymmetric cryptography and the related 'Part 2' of ANSI X9.24 and TR-39 (formerly TG-3) 2006, Section 5.

4-Day Core Course Contents (CPE 32 credits*):

Day One:

  • Processor and Auditor Responsibilities
  • Compliance Review Objectives
  • Network Respondent Forms
  • Symmetric Key Management Introduction
  • Key Names and Hierarchy
  • Cryptogram Notation
  • Diagram of PIN Transaction Flow
  • PIN Translation
  • Characteristics of TRSMs
  • Group Project

Day Two:

  • Cardholder Authentication Methods
  • PIN Block Formats
  • Exclusive-or
  • Introduction to Symmetric Key Life Cycle, Including:
    • Key Check Values
    • Single-Length vs. Double-Length Keys
    • Single DES vs. Triple DES
  • Approved Key Methodologies
  • Asymmetric Keys for Distributing Symmetric Keys - high level
  • Group Project

Day Three:

  • Review and Obtain an Understanding of Each Control Objective in the New ANS X9/TR-39 (formerly TG-3) 2006, Section 4
  • Techniques for Measuring Compliance
  • Group Project

Day Four:

  • Compliance Review Field Work Activities
  • General Key Management Documentation
  • Reporting the Findings
  • Migration to AKB
  • Exam

Class times: 8:00 AM - 4:30 PM
Break times: morning and afternoon; 10 minutes each
Lunch time: 11:30 AM - 12:30 PM (1 hour)

2-Day Refresher Class
(CPE 16 credits*):

  • Review and obtain an understanding of each control objective in the ANSI X9/TR-39 (formerly TG-3) 2006, Section 4
  • New requirements, e.g. AKB (TR-31)

Day One:
Class times: 8:00 AM - 4:30 PM
Break times: morning and afternoon; 10 minutes each
Lunch time: 11:30 AM - 12:30 PM (1 hour)

Day Two:
Class times: 8:00 AM - 4:30 PM
Break times: morning and afternoon; 10 minutes
Lunch time: 11:30 AM - 12:30 PM (1 hour)

2-Day Remote Key Class
(CPE 16 credits*):

Day One:

  • Methods of Remote Key Distribution including asymmetric methods described in ANSI X9.24, part 2

Day Two:

  • Obtain an understanding of each control objective in the TR-39 (formerly TG-3) 2006, Section 5

Class times: 8:00 AM - 4:30 PM
Break times: morning and afternoon; 10 minutes each
Lunch time: 11:30 AM - 12:30 PM (1 hour)

Click here to Register

To View the TR-39 Compliance Course Brochure Click here (PDF)