EMC to help organisations meet new PCI DSS guidelines
ConvergenceAsia staff
17/12/2010

EMC, the world’s leading developer and provider of information infrastructure technology and solutions, has announced expanded consulting services to help organisations meet new guidelines outlined within the Payment Card Industry Data Security Standard (PCI DSS) 2.0, effective January 1, 2011. The new services help organisations reduce compliance costs with the Standard and offer customers a holistic and forward-looking approach to risk management.

The PCI DSS is a framework of best practice requirements for all organisations that collect, process or store payment card account and transaction information and is designed to protect payment card data throughout the information lifecycle. Key revisions to Version Two reinforce the need for organisations to participate in a thorough scoping exercise prior to assessment in order to understand where cardholder data resides. This allows organisations to adopt a risk-based approach when assessing and prioritising vulnerabilities that is based on their specific business circumstances.

EMC’s new PCI DSS Readiness and Response services from EMC Consulting address the PCI DSS 2.0 revisions and help translate business objectives into policies and information risk strategies. Leveraging the security and compliance expertise of RSA, the security division of EMC, these services are delivered through technology, policy and program development. They also include a recommended separation of function between the PCI assessment itself and readiness and remediation planning.

“EMC Consulting and RSA are leaders in delivering programs that help customers build security strategies that meet regulatory and governance requirements, “said Tom Roloff, Senior Vice President of EMC Consulting, EMC.

“We understand that demonstrating and maintaining PCI compliance remains one of the broadest and most complex challenges faced by organisations today. By leveraging the expertise of RSA, EMC Consulting acts as a trusted security advisor, giving organisations the confidence they need to comply with regulations and also establish a foundation of broad data security best practices.”

advertisement