PCI ASV
commissum's managed services take the strain out of managing your information security.
The Payment Card Industry Data Security Standard (PCI DSS) is a detailed and mandated security standard that includes requirements for security management, policies, procedures, network architecture, application design and other specified controls. The current drive is to meet compliance by the end of September 2010, just in time for the next version of the standard.
Any company processing, storing, or transmitting payment card data must be PCI-DSS-compliant, or risk losing their ability to process credit card payments.
commissum offers the following independent security assessment services to help organisations to achieve and maintain PCI-DSS co
mpliance:
- Quarterly security scanning.
- Penetration testing: network and application.
- Host configuration reviews of firewalls and network infrastructure.
- Web Applica tion Security Assessment (WASA).
- Wireless Security Assessments.
- Securing the software development lifecycle.
- Code review.
- Recomme ndation of compensating controls.
commissum also offers a range of security consultancy services to help you with the self-certification process, including architecture reviews and pre-certification audits.
Do you need to meet the PCI DSS compliance deadline for September 2010?
Get in touch with one of our security consultants today
- No obligation
- Expert advice
- Tailored solutions
"commissum recently provided us with services to assess a web application and supporting infrastructure. I was impressed with the consultants throughout the project, by their technical knowledge, flexibility, open communication and willingness to go that extra mile. Of particular benefit was the sound advice given both during and after the engagement. By identifying vulnerabilities promptly, accompanied with practical recommendations on how to address them. We were able to implement improvements quickly. Good value, a job well done.”
JM, Infosec Analyst, International Investment Bank
Latest News
Botnets go mobile and net a lucrative catch
Researchers at security firm Symantec and at North Carolina State University have recently discovered a large and successful botnet -- with the twist that this one involves mobile phones, specifically Android smartphones.A botnet is a cluster of devices infected with the same malware (unknown to their owners), and under the ...Wed 15 Feb, 2012 //
Government cybersecurity report urges awareness rather than fear
The UK Government's Science and Technology Committee has released a report on malware and cybercrime in the UK.Malicious software, or "malware", infects computers and steals banking details and personal identity information, which can be used for identity theft. It poses a growing threat in the UK, as more people use ...Fri 10 Feb, 2012 //
UK cyber-security among the world's best in recent report
A new report collates the views of international cybersecurity experts to grade several countries according to the strength of their defence against Internet attacks.  The report, sponsored by the computer security company McAfee, ranks Israel, Finland and Sweden as the top-performing countries, with four and a half out of five ...Tue 31 Jan, 2012 //


