PCI DSS Compliance
In an effort to establish a globally consistent security standard an independent body, the PCI Security Standards Council LLC (www.pcisecuritystandards.org) was founded by American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International. The PCI Council issues and maintains the Payment Card Industry Data Security Standard (PCI DSS), a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures.
All merchants and / or third party providers that store, process or handle payment card data are required to meet the PCI DSS and regularly report their compliance status. Compliance reporting for small merchants can be as simple as completing a Self Assessment Questionnaire (SAQ), for larger merchants and third party providers, assessments must be conducted by a PCI Security Standards Council certified Qualified Security Assessor (QSA).
The process of determining compliance to the PCI DSS can be challenging for some, particularly for merchants who have an e-commerce web site where scanning of its site is required to identify any vulnerabilities that might allow unauthorised access and potential theft of payment card data. Vectra PCI DSS compliance services are designed to assist small, medium and large merchants as well as third party providers with assessing and providing guidance on meeting the PCI DSS including the supply of technology solutions.
Vectra was one of the first in Asia Pacific to provide PCI DSS services and now supports PCI DSS compliance for more than 2,000 organisations. Our clients are merchants of all sizes and types of business including retail, financial, transport, utilities, third party providers, banks, credit unions and building societies.
With one of the largest pool of QSA resources in Asia Pacific, Vectra has the capability of assisting with all aspects of PCI DSS compliance in a timely and cost-effective manner.
Vectra PCI DSS Compliance Services:
- SAQ completion
- Pre Assessment guidance
- Internal assessment validation
- Third party assessment validation
- Annual PCI DSS Assessments
- Proactive PCI DSS compliance
- Remediation solutions
Other Related Services
PCI Secure, a division of Vectra Corporation, together with our business partner McAfee, provide PCI network vulnerability scanning services to help you meet your requirements. Visit www.pcisecure.com.au for more information.
PA DSS Compliance, for organisations that have developed and supply payment applications Vectra is certified as a PA-QSA and can provide annual assessments, release validations and testing services.
Incident Response, Vectra is one of ten companies in the world to have been certified by Visa and MasterCard as a Qualified Incident Response Assessor (QIRA) enabling it to conduct forensic investigations of payment card compromises. Our investigation team is staffed with highly skilled computer forensic specialists with law enforcement backgrounds who are on standby to respond to any incident within 24 hours.
|
