|
PCI Compliance - Introduction

Supportspread PCI Security Design
Supportspread security design services Complying with PCI regulations in heterogeneous environments can be a complex
and a very costly initiative. Implementing the correct solution to meet
compliance requires a unique skill set of security professionals. Supportspread
provide Security Solutions Architects to deliver a specific system to meet your
organisations requirements.
Leveraging your existing IT infrastructure offers a simpler and cost-effective
way to address the sections of the Payment Card Industry's Data Security
Standard (PCI DSS) that matter most to IT managers - and without sacrificing
manageability and productivity.
Supportspread provide PCI security designs based around three principal
strategies:
• PCI log management
• PCI vulnerability management
• PCI file integrity monitoring
Analysing your PCI security
Supportspread can provide testing methodologies designed to identify all areas
of:
• Operating system patch compliance
• Operating system vulnerability reporting
• Application security
• Wireless access point scanning
• Network vulnerability scanning
• QSA gap analysis
Supportspread Security Solutions Architects will utilise the optimal products
sets to meet all compliance requirements to assist your organisation to become
PCI Compliant.
Achieving compliance
The PCI DSS compliance design solutions can take anything from a day to many
weeks, depending on what is uncovered by the QSA gap analysis reports and the
self-assessment questionnaire.
Organizations that currently have a good level of information security are
likely to be compliant a lot more quickly than those that don't.
QSAs carry out inspections of PCI DSS implementations and determine a
recommendation of compliance to the various payment brands. Each individual
payment brand will separately determine whether to accept the recommendation of
compliance and whether a detailed review of the report of compliance and
compensating controls is warranted.
Supportspread can bridge the technical gap further to the QSA analysis, our
solutions architects can design the required security to meet your organisations
requirements and budget.
The starting point for all organizations that need to comply is to download the
Payment Card Industry Self-Assessment Questionnaire.
Read about the PCI DSS requirements in more detail.
If you require assistance to meet the PCI required standards please do not
hesitate to contact us: enquiries@supportspread.co.uk
|