In an ongoing effort to respond to cyberattacks and payment data breaches, the Payment Card Industry Security Standards Council (PCI SSC) has added stringent requirements aimed at service providers, examining their change management processes and the maintenance of seven critical security controls.
Businesses are required to follow critical steps to protect cardholder data, including installation of firewalls, malware detection and protection, strong authentication controls, and extensive monitoring of network resources. To achieve PCI DSS v3.2 certification, service providers must demonstrate these controls during an on-site visit by a Qualified Security Assessor (QSA).
DATAMATX is a national outsourcing provider for the distribution of critical business communications and payment services. In a statement, DATAMATX COO Scott Stephens commented, “We have dedicated extensive resources and implemented additional processes to ensure our clients continue to have the highest level of confidence in the managing and processing of their data by DATAMATX.”
For more information on the PCI DSS version 3.2, visit www.pcisecuritystandards.org/documents/Prioritized-Approach-for-PCI_DSS-v3_2.pdf.
For more information on the PCI DSS version 3.2, visit www.pcisecuritystandards.org/documents/Prioritized-Approach-for-PCI_DSS-v3_2.pdf.
