Point-of-sale terminals process payment card data in retail, hospitality, and service environments. Security testing covers: terminal tampering detection (physical and logical), network segmentation between POS and corporate systems, encryption of cardholder data from terminal to processor, POS application security (can the application be manipulated to capture or expose card data?), and remote management security (how are terminals updated and configured?). PCI DSS requires specific protections for POS environments.
Technical
POS and Payment Terminal Security Testing: Protecting Point-of-Sale Infrastructure for Philippine Enterprises
Payment terminals process card data at the point of sale. Testing for skimming, tampering, and network-based attacks. Guidance for PH market.