PCI

There are many standards for securing IT systems and architectures. The standard in security for handling credit card numbers, the storage of credit card data or the processing of payments, is set by the payment card industry (PCI). This standard, abbreviated as PCI DSS or simply PCI, is used worldwide to protect data associated with credit card validations. The PCI standard is publicly available and accessible through the PCI website. Another good resource is the PCI Compliance Guide.

To achieve PCI-compliance, a number of requirements must be met, such as on infrastructure, software use, development process, systems management, administrative procedures and emergency procedures. The primary aim of all parts is to prevent credit card data leaks at all costs.

A PCI-compliant organization will not automatically maintain its status. Periodically, security-scans have to be performed to ensure that the company is still compliant with all standards. We can perform both external (penetration tests) and internal scans.

Fortytwo has extensive experience with PCI and the steps it takes to become PCI-compliant. If you are interested, contact us.