PCI DSS Compliance Advice
Who is it for?
Companies that have e-commerce sites that accept credit card information.
What is it?
PCI DSS (The Payment Card Industry Data Security Standards) is a set of mandatory security standards designed to protect cardholder data. Virtually any company that accepts credit card payments has to meet them – they are no longer a best practice, they are a requirement.
The standards include:
Building and Maintaining a Secure Network
Protecting Cardholder data
Maintaining a Vulnerability Program
Implementing Strong Access Control Measures
Regularly Monitor and Test Networks
Maintaining an Information Security Policy
When do new mandatory standards come in to effect?
These standards came in to affect on 30th June 2008 and should now be adhered to.
How does it affect me?
If your site is not compliant then you run the risk of being fined, coupled with a damaged reputation and you may even be barred from accepting credit card payments in the future.
How can I make becoming compliant less painful for my business?
The Bunker recently achieved PCI DSS compliancy.
Our accreditation will help customers meet their own requirements when working towards PCI DSS compliance. Customers of The Bunker which store credit card details, transaction data and customer information are assured that their data centre facility complies with stringent security standards outlined by payment card issuers. Additionally, customers hosting with The Bunker are exempt from requiring their own Data Centre PCI DSS accreditation.
As specialists in delivering compliant, high availability managed platforms The Bunker can package a solution that is delivered to the highest security standards, making it much easier for your business to tick the PCI compliance boxes.
We can help you gain PCI DSS compliance and secure your platform by:
Carrying out a gap analysis against the PCI standard
Designing and building a PCI compliant system.
Assisting you to develop and document your Security Management Framework, including documenting policies and processes.
Securing your Network using the Bunker Protocol
Maintain your vulnerability programme
Quickly and easily implement 2FA to enhance strong access controls
Provide 24/7 monitoring, and independent quarterly vulnerability assessments,
Through our partners we can audit your solution to achieve compliance.
Above all, we’ll be maintaining our Information Security Policy, making it easier for you to maintain yours.
