Bank of the Union completed security audit according to the PCI DSS 3.0 standard

On August 24, 2015 the DialogNauka company announced completion of works on preparation for certification and auditor service according to requirements of the international standard of security of the PCI DSS payment cards, by request of Bank of SOYUZ.

Project Tasks

Aiming to provide the high level of information security of these clients of bank, bank representatives of SOYUZ addressed to DialogNauka company. The system integrator has accreditation of Qualified Security Assessor (QSA) which allows to book certification audit on compliance to the PCI DSS standard, is accredited in the Approved Scanning Vendor (ASV) organization.

Bank of the Union, 2013

Project objective - to provide fulfillment of requirements of the PCI DSS 3.0 standard in an information system of SOYUZ Bank and to show their accomplishment in international payment systems.

Project Progress

Works affected all main systems and processes of SOYUZ Bank ensuring safety of storage, processing and data transmission of payment cards. In a work progress requirements of the PCI DSS 3.0 standard, the restrictions caused by the relevant requirements of bank connected with need of ensuring business continuity are considered.

Within the project the DialogNauka company affected in the compliance technical specifications including ASV scanning of the nodes available from the Internet and internal resources existence of vulnerabilities.

In conclusion specialists of JSC DialogNauka carried out certified conformity assessment to requirements of the PCI DSS standard and, after passing of certification audit, SOYUZ Bank received the certificate on compliance of information security systems to requirements of the international standard PCI DSS.

Project Results

The report on results of the booked audit is accepted by international payment systems of Visa and MasterCard and confirmed with the certificate on a full compliance of SOYUZ Bank to requirements of the PCI DSS 3.0 standard.

"We were faced by a difficult and responsible task of successful passing of annual audit of the standard of PCI DSS. Bank the Union treats with high degree of responsibility compliance to all safety requirements of these holders of payment cards, in particular, all necessary resources for compliance maintenance are selected. It would be desirable to note the attentive relation to the project from the contractor. Consultants of DialogNauka took comprehensive measures according to the diagram and thanks to close cooperation of our specialists successfully completed the project on certification on compliance to requirements of PCI DSS at the scheduled time. It is sure that consulting support of DialogNauka company will allow our bank and further to store data of payment cards under reliable protection", - Andrey Venevtsev, the director of the department of information technologies of Bank told the Union.

Alexander Krupchik, the director of business development and the head PCI DSS of JSC DialogNauka, noted: "The next successful project on reduction in compliance, certifications and to auditor service according to requirements of the international standard of security of the PCI DSS payment cards is high-quality confirmation of the services provided by our company as the certified QSA auditor and the ASV company. We are glad that final check of compliance to the international requirements of the PCI DSS standard showed that SOYUZ Bank completely meets the strict requirements of the standard to information security of payment systems and bank the certificate of conformity of PCI DSS 3.0 was successfully handed. According to the agreement we transferred to international payment systems the reporting documents approved with the customer which were accepted by Visa and MasterCard without notes. We hope for effective cooperation with SOYUZ Bank in the future".