Solutions/Vulnerability Scanning & Management

Are you VISA CISP and MasterCard SDP Certified ?
Deadline: 30 June 2005

>> Quick Link - Interested in chosing QualysGuard for Certification

Definition:

Visa and MasterCard developed security requirement in January 2005, namely Payment Card Industry (PCI) Standard, which has also been endorsed and adopted by American Express, Diners Club, Discover Network, JCB. According to PCI Standard, banks, E-Commerce merchant and Member Service Providers (MSPs) are required to fulfill Visa CISP (Cardholder Information Security Program) and MasterCard SDP (Site Data Protection), to protect cardholder information by maintaining secure electronic commerce.

>> Merchant Level Defined and CISP Compliance Validation Basics

Challenge:

By June 30, 2005, Visa and MasterCard will require online merchants processing more than 20,000 online transactions per year to complete a quarterly network scan and annual compliance questionnaire. Failure to comply with these security standards may results in fines, restrictions or permanent explusion from card acceptance program.

Notes: Visa will accept network scans persformed by Scan Vendors that are certified by the MasterCard SDP program.

To comply the requirements, E-commerce merchants and Managed Service Providers (MSPs) have to complete two security evaluation steps:

  1. Complete the Payment Card Industry (PCI) Self-Assessment questionnaire, which address any system(s) or system component(s) involved in processing, storing, or transmitting Visa cardholder data.

  2. Use a Network Assessment Scanning Tool, like QualysGuard, to measure and eliminite security threats associated with electronic commerce.

>> Download PCI Self-Assessment Questionnaire (DOC, 293k)
>> MasterCard - Compliant Security Vendor List

QualysGuard Samples Scanning Reports:

 


click to enlarge

click to enlarge

 

Solution:

Qualys is certified by MasterCard to help E-commerce merchants and MSPs quickly and cost effectively meet Visa CSIP and MasteCard SDP compliance standards. HiTRUST serves clients with QualysGuard solution to peform vulnerability assessment scans and can also provide assistance with the Self-Assessment questionnaire.
HiTRUST
provides an automated, on demend system to find and eliminate network security vulnerabilities; and delivers SDP certification reports with QualysGuard that are packaged and ready to meet compliance with Visa and MasterCard.


>> More information about QualyGuard
>> Free Trial of QualysGuard

 

Other Solutions

SSL Certificates

Managed Security Services
Secure Personal E-Mail Quick-Start Anti-Spam Services
Unified Authentication
Vulnerability Scanning & Management Code Signing Digital ID 
Intrusion Detection & Prevention Secured Seal Program

RELATED LINK

Reference
MasterCard SDP Compliant Security Vendor List

Visa Card CISP Details for E-commerce merchant

PCI Security Scan Procedures

PCI Self-Assessment Questionnaire


Data Sheet
QualysGuard Enterprise


White Papers
On-Demand Security Audits and Vulnerability Management

Dynamic Best Practices of Vulnerability Management

Internet Security Intelligence Briefing
CONTACT US
We Welcome Your
Comments.
Tel :
(852) 2619-1200
or E-Mail Us
VeriSign Secured Seal Program

Learn more >>
Copyright © 2005 HiTRUST.COM (HK) Inc., Ltd. Privacy Policy