Overcome the challenge of PCI-DSS V1.1 compliance

Organizations that process, store and transmit credit card data are subject to the Payment Card Industry (PCI) Data Security Standard (DSS). PCI-DSS is a set of 12 requirements that organizations whose networks, servers, and applications come into contact with cardholder data must follow. Organizations are also facing the challenge to comply with the new PCI-DSS 2007.

If any one or more of the PCI requirements are not met, organizations are exposed to punitive measures that could include fines fixed and in proportion to the breach, up to hundreds of thousands; revocation of the privilege to process credit cards; and non issuance of a compliance certificate. Not being PCI complaint involves the high risk of damaging company’s brand, reputation, and even going out of business.  Merchants can also receive significant incentives to become compliant.

In addition, the weakest link could jeopardize organizations’ business. PCI compliant merchants are required to ensure that their business partners are also business compliant.

Software security is another challenge. Despite sophisticated development methodologies, most software is developed on the basis of practices and standards that are not well attuned to meeting PCI requirements.  It is a challenge to comply with regulations at the software level and get positive results from audits.

Key Benefits

• TELUS addresses each of the 12 PCI requirements
• TELUS provides experienced leadership, specialized skill sets, and the required security technology
• TELUS provides a team equipped with strategic business risk assessment expertise, knowledge of the most current security technology, best practices, a clear understanding of compliance requirements and milestone deadlines, and highly effective tactical execution resources
• TELUS provides pre-existing intellectual property in areas such as, policies, technical standards, software security, and implementation methodology.