Council for standards of data security of the industry of the Payment Card Industry Security Standards Council PCI SSC payment cards

Open global community which tasks include development, improvement, storage, distribution and practical implementation of standards of security of banking data. The mission of Council consists in increase in data security of the industry of payment cards by means of training and informing on standards of security of PCI DSS. The organization was founded by international payment systems of American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa.

Work of partnership and Council of PCI SSC is directed to increasing the level of security of the payment cards given in the industry thanks to development of such standards as the standard of data security of the industry of payment cards (PCI DSS), security requirements of transactions using the PIN code (PTS) and the standard of data security of payment applications (PA-DSS)

The standards of security of the industry of payment cards approved by such payment systems as American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa demand from trade and service companies and service providers who store process or transfer data on holders of payment cards, to provide a certain security level of these data. For the purpose of distribution of the high level of data security of the industry of payment cards, using new technologies for a measure of their development, Council of PCI SSC relies on experience of participants of a chain of payment processing: merchatn, producers, software developers and also financial institutions.

Statuses of partners

Auditor of PCI QSA

The status of the auditor of PCI QSA grants the right to render to the clients, participants of the payment process using bank cards, full range of services on ensuring compliance to the PCI DSS standard, beginning from preliminary audit and consulting support at elimination of the revealed discrepancies, and finishing with certification audit with issue of the certificate on compliance.

Approved Scanning Vendor (ASV)

The status Approved Scanning Vendor (ASV) allows the partner to render services in scanning of external perimeter of information systems of the organizations for the purpose of detection of vulnerabilities. All organizations which get under requirements of the PCI DSS standard should undergo quarterly the procedure of external and internal scanning of network. The status ASV is given to the companies based on accomplishment of a number of requirements of the PCI Scanning Vendor Program program which is specially developed by the PCI Security Standards Council regulator.

In particular for obtaining the status ASV the specialists of DialogNauka certified properly passed examination: 18-hour testing of external perimeter of the laboratory stand created especially for emulation of infrastructure of credit institution. According to test results our employees created the report provided in PCI Security Standards Council. The report included the list of the found vulnerabilities in external network perimeter. According to the results of verification of the report which is recognized to completely relevant requirements of PCI Security Standards Council the DialogNauka company received the status ASV in 2014.

3DS Assessor

The companies with the status 3DS Assessor will be accredited by PCI SSC for carrying out compliance audits to requirements of the PCI 3DS Core Security Standard standard. For obtaining this status the company should have accreditation of QSA and also meet additional requirements. In particular, consultants with qualification of 3DS Assessor should undergo special training and pass the corresponding examination in subject of PCI 3DS Core Security Standard.

In May and 2018 the DialogNauka company received the status 3DS Assessor from Council of PCI Security Standards Council. This fact is confirmed by growth of examination of DialogNauka within the PCI DSS direction and offers new prospects regarding rendering services for corporate customers.

You watch also Payment systems and services