|
|
 |
 |
 |
|
Contact FortConsult if you wish to know: |
 |
| - | How to interpret the security requirements in PA DSS |
 |
| - | Whether you have the option of exemption from PA DSS certification |
 |
| - | How to be PA DSS validated in the quickest and most straightforward manner |
 |
| - | How you can minimise your costs in qualifying for PA DSS validation |
We can also help you obtain PA DSS vali- dation. |
|
|
 |
 |
 |
 |
|
|
 |
|
|
 |
 |
 |
| FortConsult is the only Danish enterprise which is certified by the credit card companies to both conduct audits and security scans of enter- prises' critical payment systems in accordance with PCI DSS - and to check security in payment software in accordance with PA DSS. |
|
 |
 |
 |
 |
|
|
|
 |
 |
 |
 |
| It is important to emphasise that the bank itself is responsible for ensuring that all its systems and processes comply with PCI DSS - both those that are outsourced and those that are handled by the bank itself. This also applies to the systems and processes that are looked after by the bank's data centre. Read more about PCI DSS and data centres here. |
|
| |
| Many data centres are already in the process of readying their systems to be able to successfully pass a PCI DSS audit that verifies that they live up to the requirements of PCI DSS. For you as a bank, this means in practice that your work with the standard will be minimised. There will, however, remain a number of areas in which you yourself need to verify your own status in relation to PCI DSS. |
| |
| Bank and data centre as one |
| If the bank is also its own data centre, PCI DSS must be complied with in full - thus meaning that you carry both the responsibility and have the practical work to carry out. |
|
| |
| If you are in doubt as to how you should organise your work concerning PCI DSS validation with respect to your data centre, you are welcome to contact us. We will be happy to put our experience at your disposal and to provide advice as to how best handle this division of labour. |
|
| |
In the following, you can read more about PCI DSS itself and what it means for European banks:
|
|
 |
 |
 |
|
|
 |
 |
 |
| - | PCI DSS certified in 2004 to perform security scans as the first and only company in Scandinavia. |
 |
| - | PCI DSS certified in 2005 to conduct audits as the first and only company in Scandinavia. |
 |
| - | Chosen by the bank sector in Denmark to help all Danish bank data centres to acquire PCI DSS validation due to our early PCI DSS certification, our considerable experience in the PCI area and our extensive knowledge of the financial sector. |
 |
| - | Permanent PCI DSS service provider to all Danish banks needing PCI DSS assistance. |
 |
| - | Has carried out PCI DSS tasks for some of the biggest retail chains in Scandinavia at international level. |
 |
| - | Is today the leading PCI DSS service provider in Scandinavia and the Baltic. We have, for instance, certified more than 60 percent of the enterprises on VISA's list of validated Scandinavian service providers. |
 |
| - | PA DSS certified in 2008 as the first and only company in Denmark - and among the first 14 in the world.
|
|
|
 |
 |
 |
 |
|
|
 |
|