Overview

Security Brigade's Payment Card Industry solutions are designed to help businesses achieve and maintain PCI compliance in accordance with annual audits. Following best-practice guidelines, Security Brigade supports organisations through the five phases of PCI compliance: assessment, design, deployment, management and support, and education. Using a phased approach helps organisations identify and fix root causes of non-compliance and establish internal controls to promote ongoing compliance year after year

Hightlight

• Offers pre-assessment service
• Includes annual onsite PCI assessment with report on compliance (ROC)
• Provides quarterly scanning services
• Determines current vulnerabilities with penetration testing
• Validates payment applications for PCI with application security assessment
• Gap assessment completed to determine requirements for compliance.
• Comprehensive evaluation of your information security program.
• Experienced security consultants who are focused on security assessments.
• Detailed recommendations for maintaining compliance in your organisation.
• Support and guidance from one of the industry leaders in security intelligence, our security research and development team.

Features

Security Brigade and our partners offer a variety of products and services designed to help businesses meet each of the 12 PCI requirements, referred to as “the digital dozen.” Security Brigade's PCI solutions help executives feel secure by establishing complete processes to safeguard cardholder data and satisfy the digital dozen.

Key Features

• Pre-assessment testing and remediation: A customized gap assessment is performed to determine your current level of compliance with specific requirements of PCI Standard compliance.
• PCI assessment with report on compliance: This report delivers a comprehensive evaluation of your information security program according to PCI specifications for networks, servers and databases involved in the transmission, storage and processing of credit card data.
• Post-assessment comprehensive report: This report details our strategic and tactical recommendations for maintaining compliance with PCI requirements and industry best practices.
• Quarterly external PCI vulnerability scanning assessment: Delivered four times a year, this comprehensive report delivers detailed Quarterly Scanning Assessment data and tactical recommendations for maintaining compliance with PCI requirements and industry best practices.

Benefits

Security Brigade's Payment Card Industry solutions offer organisations the following benefits through software products and professional services:

• Build effective programs that protect systems and customer data.
• Benefit from the experience of our security experts that comprise of security professionals who have honed their skill through corporate security leadership, security consulting, research and development.
• Design a customized plan that meets your specific security goals.
• Benefit from the combination of proprietary and industry-leading security assessment tools and methods.
• Reduce risk, achieve regulatory compliance, maintain business continuity and reach their security goals.

Technical Information

Security Brigades PCI Compliance Services deliver expert security consulting to help organisations of all sites reduce risk, achieve regulatory compliance, maintain business continuity and reach their security goals. Security Brigade is well qualified to help enterprises comply with the PCI DSS requirements.

As the first logical first step to compliance, the Security Brigade PCI Compliance offering comprises to the following services:

Pre-assessment
A customized gap assessment determines the current level of compliance and outlines the specific steps required to effectively achieve PCI DSS compliance before performing the formal assessment.

Annual onsite PCI assessment with report on compliance (ROC)
Provides a comprehensive evaluation of the organisation’s information security program according to PCI specifications for networks, servers and databases involved in the transmission, storage and processing of credit card data.

Quarterly scanning services
Includes a vulnerability assessment to help ensure and validate that proper security precautions are in place.

Penetration testing
Demonstrates a real-life network attack to determine current vulnerabilities and analyze how attackers significantly impact a business.

Application security assessment for payment application providers
Validates payment applications for PCI.