Multi-business processing company (PCI DSS)

Such organizations as UniCredit Bank, "the Multi-business Processing Company", Petrocommerce Bank, "People's Bank of Kazakhstan" and others became clients of a tandem of "KABEST" and FortConsult on PCI to DSS projects.

All organizations which store are obliged to observe requirements of the PCI DSS standard, process or transfer information on the carried-out transactions and owners of payment cards. Banks, trade and service companies, processing centers, call centers and other service providers of the market of payment cards treat them. A standard purpose – to provide the necessary level of information system protection of the companies and data on their clients. In this regard all above-mentioned organizations are obliged to undergo annual audit of PCI DSS at the certified auditor having the status QSA (Qualified Security Assessor).

Within partnership specialists of "KABEST" prepare the Russian organizations for certification which is carried out by FortConsult as the accredited QSA auditor. Among the consulting services rendered to "KABEST":

• organization of processes of information security support,
• choice of functional information security tools, models of the equipment and software.

In addition the company suggests to carry out scanning of a data processing system regarding vulnerability and also internal penetration test – for understanding of the existing level of protection of the payment circle of the customer.

Similar preparation for the certified audit will simplify to clients the procedure of compliance of PCI DSS and will allow to reveal system defects on a preliminary stage.