PCI DSS Compliance

In an effort to establish a globally consistent security standard an independent body, the PCI Security Standards Council LLC (www.pcisecuritystandards.org) was founded by American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International. The PCI Council issues and maintains the Payment Card Industry Data Security Standard (PCI DSS), a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures.

All merchants and / or third party providers that store, process or handle payment card data are required to meet the PCI DSS and regularly report their compliance status. Compliance reporting for small merchants can be as simple as completing a Self Assessment Questionnaire (SAQ), for larger merchants and third party providers, assessments must be conducted by a PCI Security Standards Council certified Qualified Security Assessor (QSA).

The process of determining compliance to the PCI DSS can be challenging for some, particularly for merchants who have an e-commerce web site where scanning of its site is required to identify any vulnerabilities that might allow unauthorised access and potential theft of payment card data. Vectra PCI DSS compliance services are designed to assist small, medium and large merchants as well as third party providers with assessing and providing guidance on meeting the PCI DSS including the supply of technology solutions.

Vectra was one of the first in Asia Pacific to provide PCI DSS services and now supports PCI DSS compliance for more than 2,000 organisations. Our clients are merchants of all sizes and types of business including retail, financial, transport, utilities, third party providers, banks, credit unions and building societies.

With one of the largest pool of QSA resources in Asia Pacific, Vectra has the capability of assisting with all aspects of PCI DSS compliance in a timely and cost-effective manner.

Vectra PCI DSS Compliance Services:

• SAQ completion
• Pre Assessment guidance
• Internal assessment validation
• Third party assessment validation
• Annual PCI DSS Assessments
• Proactive PCI DSS compliance
• Remediation solutions

Other Related Services

PCI Secure, a division of Vectra Corporation, together with our business partner McAfee, provide PCI network vulnerability scanning services to help you meet your requirements. Visit www.pcisecure.com.au for more information.

PA DSS Compliance, for organisations that have developed and supply payment applications Vectra is certified as a PA-QSA and can provide annual assessments, release validations and testing services.