The Petrocommerce bank completes preparation for annual certification

The Asteros group prepared Petrocommerce for annual audit of PCI DSS, the company reported on April 18, 2013.

Objectives

According to obligatory rules of international payment systems the bank is obliged to undergo annual audit on compliance to requirements of the Payment Card Industry Data Security Standard standard (PCI DSS). Successful certification confirms the high level of data security of holders of cards, processing and information storage in the protected banking networks.

Job

For successful recertification at the end of 2012 specialists of Asteros helped to analyze the regulating and organizational and administrative documents implementing measures of information security. Together with experts of the company auditor the existing IT infrastructure of bank, processing of payment cards are inspected.

Submitted to bank recommendations about improvement of a system of information security support. During the subsequent time efforts of a joint project team eliminated all defects and procedures of scanning of vulnerability of systems and penetration tests are carried out.

According to the results of the preparation lasting 9 months, the Petrocommerce bank successfully underwent the procedure of audit on compliance to the PCI DSS standard.

"Audit of PCI DSS — a difficult and responsible task for any organization working at the market of payment cards. That in current status considerable temporary and financial resources and also close attention to the project from the customer are necessary to support the heterogeneous infrastructure conforming to the international requirements for security. Thanks to harmonious interaction with employees of the bank we managed to prepare in the planned terms Petrocommerce for audit" — Sergey Konoshenko, the technical director "Asteros Information security" emphasized.

"Successful results of audit confirmed that the Petrocommerce bank completely fulfills the obligations to partners and clients on data security provision which are processed in our information systems. We thank a command of Asteros for timely consultation throughout all stages of preparation for audit and are sure of so successful cooperation in the future" — Alexander Tsurkin, the director of the department of processing of Petrocommerce bank noted.