Security management services for the maintenance of PCI DSS standards

Commissum offer a range of security management services to help businesses maintain PCI DSS compliance

The Payment Card Industry Data Security Standard (PCI DSS) is a detailed and mandated security standard that includes requirements for security management, policies, procedures, network architecture, application design and other specified controls. The current drive is to meet compliance by the end of September 2010, just in time for the next version of the standard.

Any company processing, storing, or transmitting payment card data must be PCI-DSS-compliant, or risk losing their ability to process credit card payments.

commissum offers the following independent security assessment services to help organisations to achieve and maintain PCI-DSS compliance:

• Quarterly security scanning.
• Penetration testing: network and application.
• Host configuration reviews of firewalls and network infrastructure.
• Web Application Security Assessment (WASA).
• Wireless Security Assessments.
• Securing the software development lifecycle.
• Code review.
• Recommendation of compensating controls.

commissum also offers a range of security consultancy services to help you with the self-certification process, including architecture reviews and pre-certification audits. 

Do you need to meet the PCI DSS compliance deadline for September 2010? Contact us today to find out how we can help you.

• Outsource CISO
• Interim Security Management
• Managed Scanning Services
  • Managed Network Vulnerability Assessment
  • PCI ASV Scanning
  • Monthly Web Application Scanning
• Business Continuity Management
• ISO 27001 transition