Payment Card Industry Data Security Standard (PCI DSS)
Major credit card companies are pushing hard to stop the financial fraud incidents that have affected numerous organizations and their customers. Consequently, organizations that accept payment card transactions are duly bound to comply with the Payment Card Industry (PCI) Data Security Standard (DSS). Organizations that fail to comply risk not being allowed to handle cardholder data and fines of up to $500,000 if the data is lost or stolen.
The PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data. The PCI DSS standard contains IT security requirements and guidelines for all major credit card issuers, including Visa, MasterCard, American Express, Diners Club and Discover. These card issuers joined forces to develop the new requirements as part of an industry-wide standard for protection of cardholder credit card account and transaction information.
Perimeter E-Security is a PCI Approved Scanning Vendor (ASV), passing a rigorous remote test conducted by each vendor on the PCI Security Standards Council's test infrastructure, which simulates the network of a typical security scan customer.
The Perimeter E-Security PCI Compliance Program & Solution Suite
The Perimeter Payment Card Industry (PCI) compliance program has been designed to help meet PCI-DSS regulations. Our program helps satisfy the external component of the PCI certification by identifying vulnerabilities in security processes, procedures and web site configurations.
Perimeter's PCI Compliance Program includes two services that address the base requirements of a merchant:
- Network Vulnerability Scanning
- Self Assessment Questionnaire
The Perimeter PCI Solutions Suite consists of two levels of services designed specifically to satisfy PCI requirements. No other provider can offer your organization so many services to help satisfy all of your PCI regulatory needs.
Primary Services:
Perimeter’s Primary PCI Services have been specifically mapped to PCI-DSS regulations. These services offer your organization the broadest amount of coverage from a risk mitigation standpoint. These are technologies that are specifically called out in the regulation (or sub-component of the regulation) and are necessary for all merchants to have.
- Firewall
- Intrusion Detection & Prevention
- Vulnerability Scanning
- E-Security Training
- System Virus and Spyware Protection
- Log Management
Secondary Services:
Perimeter’s Secondary PCI Services have been chosen because they are necessary for most merchants, but not all. They are all considered to be essential to a quality, layered security solution.
To speak with an expert about PCI DSS compliance you can fill out the Contact Me form on the left or call us at 800.234.2175 Option #2.
 |
Click Here to download our PCI DSS Compliance Information Sheet |
