Infobip completed audit according to the PCI DSS standard at the Russian and Kazakhstan offices

Announced 4x4 IT integrator on May 24, 2013 project completion of consultation of Infobip LLC as a result of which the company became the owner of the certificate of conformity of ISO/IEC 27001:2005.

Solution

Work on certification of the information security management system (ISMS) for process of providing telematic communication services (acceptance and transfer of sms) began in March, 2012, and went to several stages:

• Carrying out primary inspection;
• Development of SUIB according to requirements of ISO/IEC 27001;
• Implementation of SUIB according to requirements of ISO/IEC 27001;
• Preliminary (internal) audit of SUIB;
• Preparation for certification audit.

Completeness

The 4x4 company in the project implemented a full stroke of works:

• the analysis and the description of business processes of Infobip LLC for determination of a scope of SUIB,
• developed a complete set of documentation of SUIB and a form of records, provided training of staff of Infobip LLC and performed maintenance of process of certification audit.

Interdependence

Existence of the certificate of conformity of ISO/IEC 27001 for Infobip LLC became competitive advantage, and the 4x4 company did interesting work.

the Project of audit with DialogNauka

On May 24, 2017 the DialogNauka company announced the project of certification on the PCI DSS standard for the Russian and Kazakhstan offices of the provider of communication services Infobip belonging to Infobip LLC and issued the certificate of conformity to requirements of PCI DSS of version 3.2.

Action with participation of Infobip, (2016)

Infobip selected JSC DialogNauka integrator.

Certification audit of offices was booked according to the procedure:

• remote collecting and analysis of an original informatin,
• conformity assessment to the standard on site,
• development and providing report on compliance of information systems of the customer to requirements of the PCI DSS standard.

According to the results of assessment JSC DialogNauka issued certificates of conformity to requirements of PCI DSS to 3.2 both offices of the company.

Worldwide gradually different IT services which facilitate our life develop and open more and more opportunities for creation of a feedback between the companies and their clients. Naturally, for convenience of implementation of payments through these services most of people uses payment using the payment cards, and in the light of the developing cyber crime and fraud using these such cards, all companies need to ensure safety of use of this payment type. Especially for it the PCI DSS standard which allows to minimize risks when carrying out similar transactions was also developed. Our company actively develops the direction of audit and certification on the standard of security of the industry of payment cards founded by international payment systems, and we already have strong positions and enough successful projects on this direction. I believe that in the light of our wide experience and successful cases the Infobip service selected DialogNauka for execution of the project. We thank Infobip company for the address to us. We hope that the customer was satisfied with project deliverables and work of our specialists and also we expect a possibility of further mutually beneficial cooperation on subject of cybersecurity. Alexander Krupchik, director of business development of JSC DialogNauka

Need of certification audit according to the PCI DSS standard for us is caused by the fact that it allows to configure such important business processes as creation of the protected network, management of the access levels, security of the software, data protection of holders of cards, data encryption, monitoring of network and many other things. All this grants to us the right to guarantee the high level of quality and to remain the leader in the market of global mobile telecommunications and communication services. We thank DialogNauka for the done work and we hope for implementation of joint projects on cybersecurity in the future. Ruslana Reznikova, area sales manager of Infobip CIS