Informzashita confirmed compliance of the main processing center of Sberbank of Russia to requirements of the PCI DSS standard

The Main Processing Center (MPC) of Sberbank of Russia underwent certification audit on compliance to the international standard of security of the industry of the PCI DSS payment cards. Audit was booked by industry-leading cybersecurity Informzashita company.

Sberbank of Russia", being an issuer and an ekvayer of international payment systems of Visa and MasterCard and also an ekvayer of American Express, has to them direct connections and it is obliged to confirm annually compliance to requirements of the PCI DSS standard in the form of certification audit.

In connection with complexity of the estimated IT infrastructure, a large number of the resources included in the area of assessment and deadlines, several certified QSA auditors and group of technical specialists took part in the project from Informzashita at once. Within the project scopes of PCI DSS were updated, schemes of the movement of these payment cards are documented and all checks required by the standard are executed. As a result specialists collected all necessary evidence of audit and processed reporting documents which were sent to payment systems and got their approval. The bank carried out several years works on reduction of GPTs to compliance to requirements of Ministry of Railways. The project was difficult, but thanks to joint efforts of specialists of JSC Sberbank of Russia, Sberbank-tekhnologii Ltd and NIP Informzashita Ltd was succeeded to complete it precisely in the planned terms. Successful passing of certification of PCI DSS in the conditions of a difficult economic and international situation gives to Sberbank additional opportunities for strengthening of image of stable and reliable bank before clients and partners and also international payment systems.

"The main processing center of Sberbank processing more than 40 million transactions a day, undoubtedly, is the largest in all CIS. This project on conformity assessment became this call for our specialists with which we successfully coped, – Bochkaryov Alexey, the head of department of security of banking systems of Informzashita company noted.

"The Informzashita company provides services in the field of compliance of PCI DSS since 2006 and has in staff of 6 certified QSA auditors. Our experience shows that it is not less difficult to keep compliance, than to reach it for this reason we within a year help our clients for the next successful certification with compliance support, – Afonin Evgeny, the director of the department of consulting and audit of Informzashita company shared experience.