Alfa-Bank underwent certification of PCI DSS

The company "DialogNauka rendered a number of services for JSC Alfa-Bank for the purpose of ensuring fulfillment of requirements of the PCI DSS 3.2 standard. The bank successfully underwent testing of reliability and confirmed safety of implementation of payments and transfers using payment cards in the information systems.

For confirmation of conformity to requirements of the standard PCI DSS bank made the decision to order audit from the certified auditor of JSC DialogNauka, the system integrator having accreditations of Qualified Security Assessor (QSA) and Approved Scanning Vendor (ASV).

For ensuring fulfillment of requirements of the PCI DSS standard in information systems of Alfa-Bank with specialists of DialogNauka company carried out the following works:

• inspection of the information systems (IS) of a processing center on compliance to requirements of the PCI DSS standard;
• development of recommendations about implementation of a complex of organizational measures and program technical means which accomplishment should provide compliance to requirements of the PCI DSS 3.2 standard;
• external and internal ASV scanning of vulnerabilities of the IC;
• external and internal penetration tests;
• certification of the IC on compliance to requirements of the PCI DSS standard.

According to the results of the rendered services JSC Alfa-Bank underwent certification on compliance to the PCI DSS 3.2 standard and confirmed safety of work information with payment cards.