Filter page

Products

Cybersecurity Awareness Training

A picture is worth a thousand words and we believe a good story is worth a thousand training sessions.

Popcorn

Popcorn

Features

  • Award-winning Popcorn content is guaranteed to amuse, engage and be remembered
  • Single-sign-on with Microsoft Azure means no more forgotten passwords
  • Cloud platform works on any device, and any network. No infrastructure required
  • Course content and scope can be customised per user or department

Description

A picture is worth a thousand words and we believe a good story is worth a thousand training sessions. We create stories that apply key learning points to the working environment; they explain potential threats, as well as how and why policies need to be complied with and what the expected behaviour should be. Key messages in our stories are based on industry best practice and include elements of security frameworks such as ISO 27001, industry standards such as PCI DSS (Payment Card Industry Data Security Standard) and regulations such as Privacy laws (PPI).

Specifications

Cloud requires no real infrastructure other than connectivity and no vimeo blocking on devices accessing the site

Links

Secure coding – Course Catalogue Something Phishy – Course Catalogue  Compliance Training – Course Catalogue

Download as PDF

Web Gateway

McAfee Web Gateway delivers comprehensive security for all aspects of web traffic in one high-performance appliance software architecture.

McAfee

McAfee

Features

  • Common criteria EAL2+ and FIPS 140-2 Level 2 certified
  • Available in multiple hardware models and as a virtual machine supporting VMware and Microsoft Hyper-V
  • Integrated with complementary Intel® Security solutions including McAfee Advanced Threat Defense and McAfee Threat Intelligence Exchange
  • Rated number one anti-malware in a secure web gateway (AV-TEST)

Description

McAfee Web Gateway delivers comprehensive security for all aspects of web traffic in one high-performance appliance software architecture. For user-initiated web requests, McAfee Web Gateway  first enforces an organization’s Internet use policy. For all allowed traffic, it then uses local and global techniques to analyze the nature and intent of all content and active code entering the network via the requested web pages, providing immediate protection against malware and other hidden threats. And, unlike basic packet inspection techniques, McAfee Web Gateway can examine SSL traffic to provide in-depth protection against malicious code or control applications that have been hidden through encryption.

Links

Data Sheet 

Solution Brief 

Product Guide 

Best practices 

Case Study

ExpertCenter 

Review

Download as PDF

Threat Intelligence Exchange (TIE)  

McAfee® Threat Intelligence Exchange enables adaptive threat detection and response by operationalizing intelligence across your endpoint, gateway, network, and data center security solutions in real time.

McAfee

McAfee

Features

Adaptive threat protection closes the gap from encounter to containment for advanced targeted attacks from days, weeks, and months down to milliseconds.

Collaborative threat intelligence is built out of global intelligence data sources combined with local threat intelligence gathering.

You get immediate visibility into the presence of advanced targeted attacks in your organization.

Relevant security intelligence is shared in real time among endpoint, gateway, network, and data center security solutions.

You are empowered to make decisions on never-before-seen files, based on endpoint context (file, process, and environmental attributes) blended with collective threat intelligence.

Integration is simplified through the McAfee Data Exchange Layer. Implementation and operational costs are reduced by connecting together Intel Security and non-Intel Security security solutions to operationalize your threat intelligence in real time.

Description

McAfee® Threat Intelligence Exchange enables adaptive threat detection and response by operationalizing intelligence across your endpoint, gateway, network, and data center security solutions in real time. Combining imported global threat information with locally collected intelligence and sharing it instantly, allows your security solutions to operate as one, exchanging and acting on shared intelligence. McAfee Threat Intelligence Exchange narrows the gap from encounter to containment from days, weeks, and months down to milliseconds.

Specifications

McAfee Threat Intelligence Exchange consists of the following components:

  • McAfee Threat Intelligence Exchange Server 1.2.0
  • McAfee Data Exchange Layer Client 1.1.0
  • McAfee Threat Intelligence Exchange Module 1.0.1 for VirusScan Enterprise

Additional requirements for McAfee Threat Intelligence Exchange include:

McAfee Endpoint Protection

  • McAfee VirusScan Enterprise 8.8, Patch 4 with Hotfix 929019, Patch 5
  • McAfee Endpoint Security 10.1 or later

McAfee Security Management

  • McAfee ePolicy Orchestrator 5.1.1

Virtualization Infrastructure

  • VMWare vSphere 5.1.0 with ESXi 5.1 or later

Links

Data Sheet

Solution Brief 

Product Guide 1.3.0

Bank Case Study  

ExpertCenter  

Product Home Page

POC Guide

Download as PDF

Intel Data Loss Prevention (DLP)

McAfee Data Loss Prevention (DLP) Endpoint 10.0 safeguards intellectual property and ensures compliance by protecting sensitive data such as PCI, PII, and PHI wherever it lives—on premises, in the cloud, or at the endpoints.

McAfee

McAfee

Features

Real-time exfiltration prevention: Integrated with McAfee Threat Intelligence Exchange and McAfee Data Exchange Layer for visibility and real-time monitoring. Advanced protection capabilities: Leverage fingerprinting, classification, and file tagging to secure sensitive, unstructured data, such as intellectual property and trade secrets. Centralized management: Natively integrated with McAfee® ePolicy Orchestrator® (McAfee ePO™) software to streamline policy and incident management. Compliance enforcement: Ensure compliance by addressing day-to-day end-user actions, such as emailing, cloud posting, downloading to removable media devices, and more. End-user education: Real-time feedback via educational popup helps shape corporate security awareness and culture.”

Description

McAfee Data Loss Prevention (DLP) Endpoint 10.0 safeguards intellectual property and ensures compliance by protecting sensitive data such as PCI, PII, and PHI wherever it lives—on premises, in the cloud, or at the endpoints. It helps you monitor and address day-to-day end-user risky actions such as emailing, web posting, printing, clipboards, screen captures, device control, uploading to the cloud, and more.

Specifications

Supported Platforms

  • Windows 7 SP1 or later, Enterprise and Business editions, 32-bit and 64-bit
  • Windows 8 and 8.1 or later Enterprise and Professional, 32-bit and 64-bit
  • Windows Server 2008 R2 and 2008 SP2 or later, 32-bit and 64-bit
  • Windows Server 2012 and 2012 R2 or later, 64-bit
  • OS X Mountain Lion 10.8.5
  • OS X Mavericks 10.9.5
  • OS X Yosemite 10.10

Supported Browsers

  • Internet Explorer version 8 to 11
  • Mozilla Firefox 34 or higher
  • Google Chrome 31 or higher
  • McAfee ePO Software and Agents
  • McAfee ePO software 4.6.9 and 5.1.1
  • McAfee Agent for Windows 4.8 Patch 2 and 5.0
  • McAfee Agent for Mac 4.6 Patch 3, 4.8 Patch 2, and 5.0

Links

Data Sheet Solution Brief – Office 365
Product Guide
Case Study
ExpertCenter

Download as PDF

Active Response

Bolster your defenses beyond foundational endpoint protection with endpoint threat detection and response.

McAfee

McAfee

Description

Designed to monitor, control and alert when endpoints are compromised.

An endpoint detection and response tool for advanced threats.

Bolster your defenses beyond foundational endpoint protection with endpoint threat detection and response. McAfee Active Response is a leading innovation in finding and responding to advanced threats. As a key part of an integrated security architecture, it offers continuous visibility and powerful insights into your endpoints, so you can identify breaches faster and gain more control over the threat defense lifecycle. McAfee Active Response gives you the tools you need to correct security issues faster in the way that makes the most sense for your business. Key features include:

Collectors: Find and visualize data from systems.

Triggers and persistent collectors: Continuously monitor critical events or state change with one set of instructions.

Reactions: Get pre-configured and customizable actions when triggered, so you can target and eliminate threats.

Centralized management with McAfee ePolicy Orchestrator: Use a single console for comprehensive security management and automation.

Specification

Supported client operating systems

  • CentOS 6.5, 32-bit
  • RedHat 6.5, 32-bit
  • Microsoft Windows
    • Windows 8.0, Base, 32-bit, and 64-bit
    • Windows 8.1, Base, U1; 32-bit and 64-bit
    • Windows 2012, Server Base, R2; U1; 64-bit
    • Windows 2008 R2 Enterprise, SP1, 64-bit
    • Windows 2008 R2 Standard, SP1, 64-bit
    • Windows 7 Enterprise, up to SP1; 32-bit and 64-bit
    • Windows 7 Professional, up to SP1; 32-bit and 64-bit

 

Links

Data Sheet
Solution Brief
Product Guide
ExpertCenter

Download as PDF

Endpoint Protection

Identify and stop targeted attacks just as they are beginning.

Download the Datasheet

Cylance

Cylance

Features

MALWARE EXECUTION CONTROL

  • Machine learning with predictive analysis
  • Automated static code analysis
  • Memory Control Script Control
  • Application Control
  • Pre-execution prevention in <100ms
  • No signatures |
  • No prior knowledge needed No Internet required
  • No daily scans Rejects potentially unwanted programs (PUPs)

Description

Cylance applies artificial intelligence, algorithmic science and machine learning to cybersecurity and improve the way companies, governments and end users proactively solve the world’s most difficult security problems. Using  predictive analysis, Cylance quickly and accurately identifies what is safe and what is a threat, not just what is in a blacklist or whitelist. By coupling sophisticated math and machine learning with a unique understanding of a hacker’s mentality, Cylance provides the technology and services to be truly predictive and preventive against advanced threats.

Specification

  • Windows Agent Requirements Supported Operating Systems (32-bit and 64-bit)
  • Windows XP SP3 (with KB 968730) through Windows 10 (excluding Windows RT)
  • Windows XP Embedded OS and newer
  • Windows Server 2003 SP2 (with KB 968730) through Windows Server 2012R2 
 System Memory and Local Storage
  • 2 GB+ RAM
  • Approximately 500 MB of local disk storage not including quarantined items Additional Requirements
  • .NET Framework 3.5 (SP1) or higher is required on all Windows versions , Internet browser, Internet connection to register product, local administrative rights to install software.
  • Server 2003 SP2 also requires .NET 3.5 SP1 and the patch referenced in KB2868626 to update crypt32.dll. Up-to-date root certificates. 
 Mac Agent Requirements Supported Operating Systems
  • OS X 10.9 Mavericks / OS X 10.10 Yosemite / OS X 10.11 El Capitan System Memory & Local Storage
  • 2+ GB RAM
  • 500 MB of local disk storage not including any items that may have been quarantined

Links

Data Sheet

Math vs. Malware

Fidelis

Fidelis

Features

  • Detect attacks other solutions miss.
  • Identify and stop targeted attacks just as they are beginning.
  • Correlate seemingly unrelated network activity and behavior.
  • Reduce time to detect and resolve incidents.
  • Discover unmanaged devices on your network.

Description

Accelerate Triage and Validate Suspected Incidents

Automatically harvest rich system information from endpoints and correlate it against threat reputation services, advanced threat detectors and threat intelligence to confirm when endpoints are compromised.

Automate Incident Response Workflows

Easily create and customize response workflows specific to the organization. Automatically kick off remediation or perform forensic analysis by defining trigger rules and actions with the alert response workflow engine.

Eliminate Blind Spots

Identify and validate threats on your endpoints anywhere in your environment – on or off your network.

Respond Immediately

Integrate with SIEMs, next-generation firewalls and alerting tools to accelerate your response and trace alerts to compromised endpoints.

Identify Compromised Endpoints

Automatically sweep all endpoints for signs of the compromise once an Indicator of Compromise (IOC) has been validated.

Proactively Hunt for Threats

Apply network- or host-based intelligence in any format, to rapidly identify compromised endpoints and automatically take action.

Know What Happened Using Playback

Protect your systems by recording key events (e.g. files accessed, running processes, registry changes, and network and DNS activity) and receiving a detailed timeline related to a suspected incident along with prioritized alerts.

Stop Data Theft and Remediate Endpoints

Halt data exfiltration and lateral movement by isolating endpoints, halting processes, wiping files, and kicking off a script to initiate an anti-virus scan.

Links

Datasheet
Gartner Review

McAfee

McAfee

Features

Endpoint Protection – delivers advanced antivirus, anti-malware, host intrusion prevention, device control, host-based firewall, and application control to protect PCs, Macs, Linux systems, servers, virtual systems, smartphones, and tablets from online threats.

Description

A combination of AV, Firewall, web security (SiteAdvisor). Traditional Windows, Mac, and Linux systems need essential security to block advanced malware, control data loss and compliance risks caused by removable media, and provide safe access to critical email and web applications. McAfee Endpoint Protection Suite integrates these core functions into a single, manageable, multiplatform environment ideal for safeguarding traditional desktops that have limited exposure to Internet threats.

This proven enterprise and small business endpoint security solution delivers operational efficiencies and cost savings with the convenience of a single suite. It includes real-time anti-malware and antivirus protection, proactive email and web security, desktop firewall, comprehensive device control, and unrivalled centralized management.

Links

Data Sheet
Solution Brief
Product Guide
Installation Guide
Independent Review
ExpertCenter

Download as PDF

Multi Factor Authentication

SMS PASSCODE offers flexible policy-driven administration and protects multiple systems on a global scale. The solution seamlessly integrates to both remote access systems and cloud applications.

CensorNet

CensorNet

Features

  • More Factors Working to Your Advantage
  • Real-Time and Session-Specific
  • Advanced Attack Protection
  • High Passcode Security
  • Unmatched Reliability
  • Status Feedback
  • Flash SMS
  • MemoPasscodesTM
  • Location Aware Message Dispatching

Description

SMS PASSCODE is easy to install, deploy and manage. The platform offers  flexible policy-driven administration and protects multiple systems on a global scale. The solution seamlessly integrates to both remote access systems and cloud applications. The SMS PASSCODE platform allows you to get up and running in less than an hour. Run plug-and-play installation of the SMS PASSCODE software, setup the preferred dispatch mechanism(s), and the system is ready for use. Rollout involves no software deployment on user devices and practical training of the user group is not needed. SMS PASSCODE comes with one-click integration to Active Directory and LDAP Directories. No schema changes or extensions are required.

Specification

RADIUS VPN/SSL VPN Clients Check Point
 Cisco ASA 
Netscaler Gateway & Citrix Access Gateway (CAG)
 Juniper
 Microsoft Forefront (UAG)/Direct Access
Barracuda SSL VPN and NG rewalls
 VMware Horizon View
 Microsoft SharePoint Portal Server 1
Any other RADIUS client supporting challenge/response Palo Alto
F5 BIG-IP
NCP VPN Microsoft TMG Server & Websites

Support for Microsoft TMG published websites:

  • Outlook Web Access 2003 / 2007 / 2010 / 2013
  • Remote Desktop Web Access 
(Windows Server 2008 R2 / 2012 R2)
  • Microsoft SharePoint Portal Server
  • IIS websites using Basic or Integrated Windows 
Authentication
  • Any website not requiring Authentication Delegation 
Citrix Web Interface
  • Microsoft AD FS Protection
  • AD FS 2.0 plug-in for multi-factor authentication
  • AD FS 3.0 multi-factor authentication adapter

Transparent support for multi-factor authentication when:

  • Accessing Cloud Applications such as Saleforce.com, Microsoft Of ce 365, Google Apps etc. (AD FS 2.0/3.0)
  • Accessing websites published through the Microsoft Web
  • Application Proxy (AD FS 3.0), such as SharePoint and Outlook Web Access
  • Approving devices during workplace joins (AD FS 3.0)
  • Internet Information Services (IIS) Websites

Support for the following types of websites:

  • Outlook Web Access 2007 / 2010 / 2013
  • Remote Desktop Web Access
  • Windows Server 2008 R2 / 2012 R2)
Websites using Basic / Integrated Windows Authentication
  • Windows Logon, Remote Desktop Services

Support for the following Servers and Services:

  • Remote Desktop Services (RDP Connections)
  • Windows Servers 2008 R2 / 2012 / 2012 R2
  • Windows 7, Windows 8, Windows 8.1 and Windows 10
  • VMware Virtual Desktop Portal & Client Access

Links

Evaluation Checklist  
Beginners Guide   

Download as PDF

Host Intrusion Prevention System (HIPS)

McAfee® Host Intrusion Prevention for Server delivers specialized web and database server protection to maintain system uptime and business continuity.

McAfee

McAfee

Features

  • Enforce the broadest IPS and zero-day threat protection coverage across all levels: network, application, and execution.
  • Reduce time and costs with one powerful, unified console for deployment, management, reporting, and auditing of events, policies, and agents.
  • Patch endpoints less frequently and with less urgency.
  • Manage compliance with easy-to-understand actionable views, workflow, event monitoring, and reporting for prompt and proper investigation and forensics.

Description

McAfee® Host Intrusion Prevention for Server delivers specialized web and database server protection to maintain system uptime and business continuity along with the industry’s only dynamic and stateful firewall to shield against advanced threats and malicious traffic. In addition, it also provides signature and behavioral intrusion prevention system (IPS) protection. McAfee Host Intrusion Prevention for Server reduces patching frequency and urgency, preserves business continuity and employee productivity, protects data confidentiality, and simplifies regulatory compliance.

Download as PDF

Application Control

McAfee Application Control prevents zero-day and APT attacks by blocking execution of unauthorized applications.

McAfee

McAfee

Features

  • Protect against zero-day and APTs without signature updates.
  • Uses McAfee Global Threat Intelligence and McAfee Threat Intelligence Exchange to provide global and local reputation of files and applications.
  • Strengthen security and lower ownership costs with dynamic whitelisting that automatically accepts new software added through your trusted channels.
  • Efficiently control application access with McAfee® ePolicy Orchestrator® (McAfee ePO™) software, a centralized platform for management of McAfee security solutions.
  • Reduce patch cycles through secure whitelisting and advanced memory protection.
  • Keep systems current with the latest patches using trusted updaters.
  • Enforce controls on connected or disconnected servers, virtual machines, endpoints, fixed devices such as point-of-sale terminals, and legacy systems such as Microsoft Windows XP.
  • Allow new applications based on application rating or self-approval for improved business continuity.
  • Maintain user productivity and server performance with a low-overhead solution.
  • Easily protect legacy systems and modern technology investments.

Description

McAfee Application Control prevents zero-day and APT attacks by blocking execution of unauthorized applications. Using our inventory feature, you can easily find and manage application-related files. It groups binaries (EXEs, DLLs, drivers, and scripts) across your enterprise by application and vendor, displays them in an intuitive, hierarchical format, and intelligently classifies them as well-known, unknown, and known-bad applications. Using whitelisting, you can prevent attacks from unknown malware by allowing only known good whitelisted applications to run. Works with GTI, TIE and ATD.

 Supported platforms

  • Microsoft Windows (32-bit and 64-bit)
  • Embedded: XPE, 7E, WEPOS, POSReady 2009, WES 2009, 8, 8.1 Industry, 10
  • Server: 2008, 2008 R2, 2012, 2012 R2
  • Desktop: NT, 2000, XP, Vista, 7, 8, 8.1, 10 Linux
  • Red Hat/CentOS 5, 6, 7
  • SUSE/openSUSE 10, 11
  • Oracle Enterprise Linux 5, 6, 7
  • Ubuntu 12.04

Links

Data Sheet
Solution Brief
Product Guide
Potentially Unwanted Programs
Case Study – Cemex
ExpertCenter

Download as PDF

Advanced Threat Protection

Designed to work with other products, a central system to verify files.

McAfee

McAfee

Features

  • User interactive mode: Enables analysts to interact directly with malware samples.
  • Extensive unpacking capabilities: Reduces investigation time from days to minutes.
  • Full logic path: Enables deeper sample analysis by forcing execution of additional logic paths that remain dormant in typical sandbox environments.
  • Sample submission to multiple virtual environments: Speeds investigation by determining which environment variables are needed for file execution.
  • Detailed reports from disassembly output to graphical function call diagrams and embedded or dropped file information: Provides critical information for analyst investigation.

Description

Designed to work with other products, a central system to verify files. Works with: McAfee Active Response, McAfee Application Control, McAfee Enterprise Security Manager, McAfee ePolicy Orchestrator software, McAfee Network Security Platform, McAfee Threat Intelligence Exchange, McAfee Web Gateway McAfee Advanced Threat Defense protects against advanced malware, including zero-day and advanced persistent threats, providing the strongest advanced threat protection available. Advanced targeted attacks are designed to defeat security systems through approaches that either confuse or evade defenses. McAfee Advanced Threat Defense detects targeted attacks and connects with existing defenses, converting threat intelligence into immediate action and protection. Unlike traditional sandboxes, it provides multiple analysis engines to broaden detection and expose evasive threats. As part of the Security Connected platform, McAfee Advanced Threat Defense is tightly integrated with other Intel Security solutions—from network to endpoint—enabling instant sharing of threat intelligence across the entire infrastructure to enhance zero-day threat protection, reduce time from detection to containment, and aid investigation to remediate post-attack.

Specification

ATD-3000 – 30 VMs, Form factor 1U Rack-Mount ATD-6000 – 60 VMs, Form factor 2U Rack-Mount File/media types supported: PE files, Adobe files, MS Office Suite files, Image files, Archives, Java, Android Application Package Analysis methods: McAfee Anti-Malware, GTI reputation: file/URL/IP, Gateway Anti-Malware (emulation and behavioral analysis), dynamic analysis (sandboxing), static code analysis, custom YARA rules Supported OS: Win 8 (32-bit/64-bit), Win 7 (32-bit/64-bit), Win XP (32-bit/64-bit), Win Server 2003, Win Server 2008 (64-bit); Android All Windows operating system support available in: English, German, Italian, Japanese, and Simplified Chinese.

Links

Data Sheet Solution Brief Product Guide 3.6.2
Best practices to avoid being compromised by file infectors
Best practices to avoid being compromised by Worms
Bank Case Study
ExpertCenter

Download as PDF

Services

Network Security

Network Security components keep your network safe.

Cognosec Services

Cognosec Services

Features

Network Security refers to the security components which reside at the network layer of the business. The network layer connects the individual computers servers, applications and data storage areas together. Many attacks and interception attempts take place at this level, so it is a critical area to protect. The rapid adoption rate of cloud services and smart apps is becoming increasingly complex to manage, for both businesses and individuals in their own capacity. We provide a full service offering for any size of business from 25 users to 80,000 users, ranging from consulting, gap analysis, architecture & design, implementation and management of:

  • Host-based Intrusion Prevention Services HIPS) – For Servers
  • Perimeter facing and Internal facing Firewalls
  • Web Application Firewall Services
  • Network Access Control (NAC)
  • Network Intrusion Prevention (NIPS) Services

Description

Network Security components keep your network safe and include some or all of the following, depending on your requirements:

Firewalls (FW) – These are network devices that operate like border controls – only allowing the traffic you want to pass in and out of your company.

Web Application Firewalls (WAF) – These are similar to firewalls but designed to protect public websites. They only allow specific web traffic through in either direction to protect sensitive or confidential information often held in databases linked behind the website. WAFs are Essential for eCommerce businesses, who need public facing websites that facilitate payments.

Network Intrusion Prevention Services (NIPS) – protects against malicious hidden processes and hacking using devices on the network. These devices process large volumes of traffic and generate many lines of  log data, which have to be managed properly to deliver proper value.

Network Access Control (NAC) – This technology prevents unauthorized (or “Rogue”) devices from joining your network. When a device does not meet your security policies or standards it should not be able to access your network.

Network Data Loss/Leakage Prevention (NDLP) – is a technology which utilizes policies on a computer that helps prevent sensitive data from being transmitted to the wrong people, both inside and outside the company.

Distributed Denial of Service (DDoS) Services –DDoS attacks have evolved into complex and overwhelming security challenges. The attacks target the transport and network layers of a communication system and flood network interfaces with traffic, causing inability to respond to legitimate traffic. This impacts your ability to conduct business using the network or internet, causing financial loss.

By choosing the correct managed cybersecurity services provider, all technologies can be deployed, configured and managed from a central console, but have to be properly tuned and managed to deliver ROI to the End User.

All reporting, remediation and escalation activities coordinated centrally.

Download as PDF

Data Security

Data Security describes how your business protects it’s Intellectual Property or “Crown Jewels”.

Cognosec Services

Cognosec Services

Features

The service would typically involve full or part-time management of some or all of the following technologies:

  • Antimalware
  • Browser Control
  • Endpoint Encryption
  • Host Based Intrusion Prevention
  • Database Security
  • Host-based Data Loss/Leakage Prevention (DLP)
  • Cloud Application Controls & BYOD

Description

Data Security describes how your business protects it’s Intellectual Property or “Crown Jewels”. Data Security is achieved by combining various technologies at specific points on a network and configuring these to work together according to security best practice. Every company’s network will differ slightly from others, so it is important to architect the solution before implementing it. We provide a full service from consulting, gap analysis, architecture & design, implementation and management.

Specification

Remote Managed Services imply the virtual presence of our people on your premises. Our staff work remotely either as technical consultants or subject matter experts, or may perform specific operational security tasks for your company, depending on your requirements and the type of service you require. Our Remote Managed Cyber Security Service options are:

  • Retainers, where a fixed amount of hours are purchased, bundled with an SLA for a guaranteed response.
  • Full Outsource Where you fully outsource one or more of your security functions to us. We take full responsibility for the function from end to end, (this can include design, implementation, which would take place on site. Once implementation has been completed, we will remotely perform the daily management of the platform and / or the chosen solutions. This would typically include reporting, escalation, troubleshooting and upgrading.
  • Partial Outsource Where you partially outsource one or more of your security functions to us. We take partial responsibility for the function, and this work takes place remotely. This can include aspects of design, implementation,  management of a platform or solution, reporting, escalation, troubleshooting and upgrading.

Our Managed Cyber Security Services can be tailored according to your exact needs and budget. We do not subscribe to a one size fits all approach. We have developed and refined an agile framework which focuses on the successful delivery and implementation of affordable security services to all sectors of the market. Customers who adopt our framework through our managed security services make noticeable progress towards a more mature security posture in very short timeframes. This is borne out in vastly improved coverage, policies, detection rates, correlation, deduplication, escalation processes, analysis, incident response and forensic capability, reporting and visibility.

Download as PDF

Network Protection

Cognosec’s Network Security service offers tailored defense systems such as Unified Threat Management (UTM) solutions.

Cognosec Services

Cognosec Services

Description

Developing a network with full-fledged security involves the implementation of many elements and need to be performed by experienced teams of specialists. Cognosec’s Network Security service offers tailored defense systems such as Unified Threat Management (UTM) solutions. UTM is the evolution of the traditional firewall and is an all-inclusive security product able to perform multiple security functions within one single appliance such as network firewalling, network intrusion prevention and gateway antivirus (AV), gateway anti-spam, VPN, content filtering, load balancing, and data leakage prevention. The combination of automated scanning and manual search filtering provides you with an extremely efficient and effective way of protecting yourself against even the most pesky attackers.

Specifications

Network protection consists of the policies and practices adopted to prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources.

Download as PDF

Data Protection

We offer complete design, implementation, and customisation support for access-rights management systems and data leakage prevention solutions. This provides valuable information used for detecting unauthorised access events and any possible data leakages

Cognosec Services

Cognosec Services

Features

Cognosec can assist you while implementing the correct architecture to protect your data.

Network DLP

Typically a software or hardware solution that is installed at network egress points near the perimeter. It analyzes network traffic to detect sensitive data that is being sent in violation of information security policies.

Endpoint DLP

Such systems run on end-user workstations or servers in the organization. Like network-based systems, endpoint-based can address internal as well as external communications, and can therefore be used to control information flow between groups or types of users.

Data identification

DLP solutions include a number of techniques for identifying confidential or sensitive information. Sometimes confused with discovery, data identification is a process by which organizations use a DLP technology to determine what to look for (in motion, at rest, or in use).

Data leakage detection

Sometimes a data distributor gives sensitive data to a set of third parties. Some time later, some of the data is found in an unauthorized place (e.g., on the web or on a user’s laptop). The distributor must then investigate if data leaked from one or more of the third parties, or if it was independently gathered by other means.[8]

Data at-rest

“Data at rest”” specifically refers to old archived information that is stored on either a client PC hard drive, on a network storage drive or remote file server, or even data stored on a backup system, such as a tape or CD media. This information is of great concern to businesses and government institutions simply because the longer data is left unused in storage, the more likely it might be retrieved by unauthorized individuals outside the Network.[9] In order to protect this phase of data, systems use methods such as access control and data encryption.[1]

Data in-use

“Data in use” refers to active data stored in databases that the user is currently interacting with. DLP systems that protect data in-use may monitor and flag certain unauthorized activities.

Data in-motion

“Data in motion” is data that is currently traversing through a network to an endpoint destination. These networks can be internal or external. DLP systems that protect data in-motion monitor sensitive data that is being sent over a network through various communication channels such as email or IM

Description

The protection of sensitive data such as passwords, payment information, financial data, or intellectual property needs to a priority for organisations. With the establishment of security regulations such as the PCI DSS, HIPAA, and the EU Data Protection Directive, systems can be brought to a high standard of security, but the sheer number of threats targeting vital systems is dramatically increasing, so efforts towards protecting data should as well. Security breaches resulting in leaked data can become very costly to an organisation and to it’s clients should attackers get ahold of sensitive data. Cognosec can perform an assessment on the IT-infrastructure handling the data and can ensure that your sensitive data is properly managed . We offer complete design, implementation, and customisation support for access-rights management systems and data leakage prevention solutions. This provides valuable information used for detecting unauthorised access events and any possible data leakages

Specifications

The term data protection is used to describe both operational backup of data and disaster recovery/business continuity (BC/DR). A data protection strategy should include data lifecycle management (DLM), a process that automates the movement of critical data to online and offline storage and information lifecycle management (ILM), a comprehensive strategy for valuing, cataloging and protecting information assets from application/user errors, malware/virus attacks, machine failure or facility outages/disruptions.

Download as PDF

PCI DSS SAQ

Cognosec offers professional guidance to small-to-medium sized businesses in achieving PCI compliance and completing the Self-Assessment Questionnaire.

Cognosec Services

Cognosec Services

Features

The Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations that store, process and/or transmit cardholder data. The framework covers technical and operational system elements connected to cardholder data. If you store, process or transmit credit card data you are subject to this standard. Cognosec is a Qualified Security Assessor (QSA) and as a QSA we are authorised to help your company obtain and maintain PCI DSS compliance. Cognosec GmbH can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer –creating a rounded and comprehensive compliance package. Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors. As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

All business that store, process or transmit payment cardholder data must be PCI Compliant. As a Qualified Security Assessor (QSA), Cognosec offers professional guidance to small-to-medium sized businesses in achieving compliance and completing the Self-Assessment Questionnaire. The PCI DSS self-assessment questionnaires (SAQs) are validation for merchants and service providers self-evaluating their compliance with PCI DSS.  Organizations can either undergo their own PCI DSS assessments, or  a QSA company can conduct PCI DSS assessment and underwrite their SAQs.

Specification

There are different versions of the SAQ to meet different merchant environments. As a Qualified Security Assessor (QSA) we are able to provide PCI DSS SAQ assessment to organizations seek professional guidance in achieving compliance and completing the following Self-Assessment Questionnaires. SAQ A is intended for merchants that accept only card-not-present transactions (that is, e-commerce, mail order or telephone order), and that outsource all their cardholder data functions to PCI DSS compliant service providers. SAQ A would never apply to face-to-face merchants. SAQ B is for those merchants who process cardholder data using only imprint machines or using only dial-out terminals. SAQ C-VT is for merchants using only web-based virtual payment terminals, where cardholder data is manually entered into a secure website from a single system. SAQ C is for merchants with dedicated payment application systems segmented from all other systems, and connected to the Internet for the purposes of transaction processing. SAQ P2PE-HW is for merchants using a validated P2PE solution that is listed on the PCI SSC website. SAQ D is for all other SAQ-eligible merchants that do not fall into any of the other SAQ categories, and for any service providers defined by a payment brand as eligible to complete the SAQ.

Download as PDF

PCI Security Awareness Programme 

The Cognosec Security Awareness Program is designed to help you raise the level of understanding of how important security is today, and to help you push responsibility throughout the company.

Cognosec Services

Cognosec Services

Features

Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.

Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package.

We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

It is imperative that any individual capable of accessing information technology resources understands the value of the information resources and their responsibility of keeping those resources safe from abuse. To address PCI DSS requirements 12.5 and 12.6, which refer to the distribution of security polices throughout the company and the existence of a formal security program, Cognosec offers full support in the development of security policies and security awareness programs.

The Cognosec Security Awareness Program is designed to help you raise the level of understanding of how important security is today, and to help you push responsibility throughout the company.

Specification

The Cognosec 360 Security Awareness Program is designed to help you raise the level of understanding of how important security is today and help you push responsibility throughout your organisation. Our highly international staff have decades of experience in IT Security, having worked directly with the major card brands, acquirers as well as merchants and payment service providers. The Cognosec Team fully understands the kind of risk and pressure our clients go through to reach their IT security, compliance and governance objectives.Cognosec’s 2-Day workshop, delivered by a QSA, has three components:

  1. A management training session for senior managers, HR executives and CxOs.
  2. An end-user security awareness training session – including a test of the material.
  3. A session analysing the company polices and ad- dressing any gaps. On completion of the workshop, Cognosec will help you build a sustainable security awareness program into the company.
Download as PDF

PCI Remediation

We provide individual services for implementing missing elements of an organisation’s security policies to match those of the PCI DSS. Variances between the PCI DSS Standard and an organisation’s currently established policies and practices detected in the gap assessment need to be addressed.

Cognosec Services

Cognosec Services

Features

The Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations that store, process and/or transmit cardholder data. The framework covers technical and operational system elements connected to cardholder data. If you store, process or transmit credit card data you are subject to this standard. Cognosec is a Qualified Security Assessor (QSA) and as a QSA we are authorised to help your company obtain and maintain PCI DSS compliance. Cognosec GmbH can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer –creating a rounded and comprehensive compliance package. Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors. As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

PCI Remediation is a follow on from a PCI DSS Gap Assessment and involves remediating those requirements of PCI DSS in which you are not compliant. We provide individual services for implementing missing elements of an organisation’s security policies to match those of the PCI DSS. Variances between the PCI DSS Standard and an organisation’s currently established policies and practices detected in the gap assessment need to be addressed. PCI DSS compliance is achieved when solutions and sound policies are implemented that fully address and satisfy PCI DSS. Variances between the PCI DSS and an organisation’s currently established policies and practices detected in the gap assessment need to be addressed. Any entity that accepts payment card transactions must be compliant with all 12 elements of the PCI Data Security Standard. Cognosec provides individual services for implementing missing elements of an organisation’s security policies to match that of the PCI DSS.

Specification

All organisations that store, process and/or transmit cardholder data must be compliant with PCI DSS 12 requirements.  PCI Remediation is basically identifying and fixing the “not in place” items to be remediated of PCI DSS. If items are discovered to be not in place in the organization, the QSA provides as much detail as needed to explain the remediation actions and the timeline for compliance and the organization perform the remediation activities. PCI Remediation is basically identifying and fixing the 12 elements of PCI DSS in which you are not compliant. Cognosec provides individual services for implementing missing elements of an organisation’s security policies to match that of the PCI DSS. Variances between the PCI DSS and an organisation’s currently established policies and practices detected in the gap assessment need to be addressed. Remediation recovery is achieved when solutions and sound policies are implemented that fully address and satisfy the compliance requirements. AS a QSA company, we provide both workshops and individual services for implementing missing elements of an organisation’s security policies to match that of the PCI DSS. – Cognosec offers workshops to dive deep into the data security standard – allowing you to select the right technologies and architecture to attain and maintain the PCI DSS. – Cognosec helps you complete the gaps in your documentation and review the policies, procedures, and processes of your business. – As an ASV, Cognosec is able to perform external vulnerability scans in accordance with PCI DSS requirement 11.2. These scans provide a consistent outlook over an organisation’s security posture – identifying the potential threats to their IT system. – Cognosec offers Penetration Testing of a PCI DSS Scoped Environment and Internal Penetration Testing of a PCI DSS Scoped Environment – Cardholder Data Discovery

Download as PDF

PCI GAP Assessment

Cognosec’s PCI Gap Assessment is available for both remote and onsite activities. To create the most accurate assessment possible, it also includes interviewing system architects, systems administrators, testing personnel, and support staff.

Cognosec Services

Cognosec Services

Features

The Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations that store, process and/or transmit cardholder data. The framework covers technical and operational system elements connected to cardholder data. If you store, process or transmit credit card data you are subject to this standard. Cognosec is a Qualified Security Assessor (QSA) and as a QSA we are authorised to help your company obtain and maintain PCI DSS compliance. Cognosec GmbH can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer –creating a rounded and comprehensive compliance package. Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors. As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

A PCI DSS Gap Assessment is an analysis on the differences between  an entity’s present security standards and policies and the twelve requirements of PCI DSS. The variances, or “gaps”, are then determined and can be corrected with PCI Remediation. If you have been asked to comply with the PCI DSS by a card brand, an issuing or acquiring bank, a business partner, or a customer who requires it as part of a due diligence exercise, Cognosec can help you. Cognosec’s PCI Gap Assessment is available for both remote and onsite activities. To create the most accurate assessment possible, it also includes interviewing system architects, systems administrators, testing personnel, and support staff.

Specification

Most companies have established security standards and procedures in place, but as the world is conforming on one standard, a reassessment is necessary. A PCI DSS Gap Assessment is an analysis on the differences between established security standards and those demanded by the PCI SSC. The variances, or “gaps”, are then determined and corrected. Our process includes interviewing system architects, systems administrators, testing personnel, support staff and others to gather the most information possible – aiding the subsequent analysis and generation of the final PCI DSS Gap Analysis report. Many companies already have security standards and procedures in place, but as the world is conforming to one standard, a re-assessment is often necessary. A PCI Gap Assessment is an analysis on the variances between established security standards and those required by the PCI SSC for PCI certification.

Download as PDF

PCI ASV Security Scan 

We are a Certified Approved Scanning Vendor ASV and provide vulnerability scanning services in accordance with PCI DSS.

Cognosec Services

Cognosec Services

Features

Security vulnerabilities of Internet facing systems can potentially have severe, wide-reaching implications for your organisation. Cognosec’s certified ASV Scans will identify weaknesses and vulnerabilities as well as quantify their severity – allowing them to be managed efficiently and effectively. Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors. As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

An Approved Scanning Vendor (ASV) is an organization with a set of security services and tools to validate adherence to the external scanning requirement of PCI DSS Requirement 11.2.2. We are a Certified ASV and provide vulnerability scanning services in accordance with PCI DSS. Vulnerability scan results provide valuable information that supports efficient patch management and other security measures that improve protection against Internet attacks. Any organisation who wants to maintain their PCI compliance, who wants to know what their weaknesses and vulnerabilities are, and who wants to prevent financial and reputational loss has to conduct ASV scans.

Specification

Cognosec’s Approved Scanning Vendor scans identifies weaknesses and vulnerabilities as well as quantifies their severity – allowing them to be managed efficiently and effectively. This means that an organisation:

  • Fulfils the PCI DSS Requirement 11.2 for quarterly vulnerability scans performed by an ASV.
  • Provides proof of due diligence to regulators, customers and shareholders.
  • Prevents financial loss through fraud or unreliable infrastructure.
  • Protects your brand against the loss of reputation.

Cognosec performs regularly scheduled scans (monthly or quarterly), as well as ad hoc scans – producing and delivering an ASV Report containing every discovery and an evaluation thereof. Security matters covered range from authentication, authorisation and misconfiguration issues to information disclosure and obsolete software version concerns.

What is included in a scan?

Cognosec’s Scanning Solutions test and report on:

  • Firewalls & Routers
  • Operating Systems
  • Database Servers
  • Web Servers
  • Application Servers
  • Common Web Scripts
  • Built-in Accounts
  • DNS Servers
  • Mail Servers
  • Web & Other Applications
  • Common Services
  • Wireless Access Points
  • Backdoors
  • SSL/TLS
  • Remote Access
  • Point-of-sale (POS) Software
Download as PDF

PCI QSA Onsite Assessment

Cognosec’s PCI On-site Assessment is a systematic evaluation of an organisations level of compliance to the Payment Card Industry Data Security Standard (PCI DSS), which needs to be performed during the securitisation process and at regular intervals.

Cognosec Services

Cognosec Services

Features

The Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations that store, process and/or transmit cardholder data. The framework covers technical and operational system elements connected to cardholder data. If you store, process or transmit credit card data you are subject to this standard.

Cognosec is a Qualified Security Assessor (QSA) and as a QSA we are authorised to help your company obtain and maintain PCI DSS compliance. Cognosec GmbH can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer –creating a rounded and comprehensive compliance package.

Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors.

As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Cognosec’s PCI On-site Assessment is a systematic evaluation of an organisations level of compliance to the Payment Card Industry Data Security Standard (PCI DSS), which needs to be performed during the securitisation process and at regular intervals. As a Qualified Security Assessor (QSA) we are able to perform an evaluation which covers all twelve requirements of the PCI DSS standard.  A multitude of facets including: technical sampling of in-scope systems, staff interviews and a final policy review – are included, confirming that suitable measures have been taken and that appropriate policies have been put into place. Upon completion of the PCI On-site Assessment, a Report on Compliance (ROC) will be drafted in a format that is acceptable for submission to relevant card brands.

Specification

“As a Qualified Security Assessor (QSA), Cognosec offers the highest quality and smoothest assessment possible. The evaluation will cover a multitude of facets including: technical sampling of in-scope systems, staff interviews and a final policy review – confirming that the suitable measures have been taken and that appropriate policies have been put into place. Upon completion of the PCI On-site Assessment, a Report on Compliance (ROC) will be drafted and will be ready to be submitted to relevant card brands.

There are 5 PCI DSS phases to the Cognosec PCI methodology. Four of them are audit processes and one of them is a half yearly customer review.

  1. Initial Gap Analysis and Onsite Audit
  2. Evaluation of gathered Evidence and Remediation
  3. Report and Review
  4. Project closeout
  5. Half Yearly Review

– For PCI Level 1 Service Providers, to maintain PCI compliance, a PCI On-site Assessment needs to take place absolutely no later than four months (six months is recommended) before the expiration of a PCI certificate, as specified by the card brand listings.

– For PCI Level 1 Merchants, to maintain PCI compliance, a PCI On-site Assessment needs to take place at least four months before the initial PCI compliance date mandated by an acquirer, or four months before the initial re-certification.

Client related activities related to Payment Card Industry Data Security Standard (PCI DSS) are

  1. Validate the scope of the assessment
  2. Contract Drafted & Signed
  3. Onsite Audit Preparation Phase

– Scheduling Phase

– Client Hub Created in Secured OwnCloud

– Client Data Upload to Secured Owncloud

– Policies and Procedures Excel File completed

  1. Conduct PCI Data Security Standard assessments

– Verify all technical information given by merchant or service provider

– Be onsite for the duration of any relevant assessment procedure

– Review the work product that supports the assessment procedures

– Adhere to the PCI DSS Requirements and Security Assessment Procedures

– Select representative samples of business facilities and system components where sampling is employed

–  Evaluate compensating controls (if any)

  1. Produce the final Report on Compliance
  2. Produce the Compliance Certificate
  3. Submit Validation Documents to Card Brands
  4. Client Feedbacks & Testimonials

 

Download as PDF

Vulnerability Assessment

Cognosec performs regularly scheduled scans (monthly or quarterly), as well as ad hoc scans when needed, that concludes with a final ASV Report containing every threat discovery and an evaluation thereof.

Cognosec Services

Cognosec Services

Features

Vulnerability assessment should be a continuous process for every organisation exposed to the Internet. We offer vulnerability scanning as a subscription service on a monthly (recommended) or a quarterly basis. (Since it’s a semi-automated process, it requires minimum effort from the customer.)

Description

A vulnerability assessment identifies, quantifies and prioritises (or ranks) the vulnerabilities in a system, using both system and application vulnerability scans. System vulnerabilities normally exist because of exploitable programming errors in either the operating system or the hardware, and vendors normally release patches when these errors are made public. Patching hundreds or thousands of systems is a tedious business, though, and can sometimes disable functioning applications. Consequently, it is often resisted by IT departments. Vulnerability scans are semi-automated processes that can check whether patches or updates have been installed, bugs removed and systems securely configured. They report everything found. Our auditors then carefully review the results to sift out false positive and check whether a vulnerability exists – and whether action needs to be taken.

Specification

Cognosec performs regularly scheduled scans (monthly or quarterly), as well as ad hoc scans when needed, that concludes with a final ASV Report containing every threat discovery and an evaluation thereof. Cognosec’s scanning solutions test and report on all of the following systems:

  • Firewalls & Routers
  • Operating Systems
  • Database Servers
  • Web Servers
  • Application Servers
  • Common Web Scripts
  • Built-in Accounts
  • DNS Servers
  • Mail Servers
  • Web & Other Applications
  • Common Services
  • Wireless Access Points
  • Backdoors
  • SSL/TLS
  • Remote Access
  • Point-of-sale (POS) Software
Download as PDF

Cognosec SAQ Portal

We’ve developed an online portal that make compliance and acquirer-merchant communication easier.

Cognosec Services

Cognosec Services

A fast and effective compliance tool

If you’re a card acquirer (typically, a bank or other financial institution), you’ll need to take steps to ensure merchants (entities that accept it) comply with the 12 requirements of PCI DSS. If you’re a merchant or service provider (for example, a data centre, sales agent or remittance processing company) handling smaller numbers of transactions, you’ll need to prove your compliance through a Self-Assessment Questionnaire (SAQ).

We’ve developed an online portal that can help in either case – and make compliance and acquirer-merchant communication easier.

It’s a simple electronic tool, and it allows merchants to download the PCI SAQs, sign them and send them to acquirers, and acquirers to use the information to create reports for card providers.

Importantly, we can see all the data, and offer support for both acquirers and merchants. We even provide electronic certificates.

Our portal is the fast-track to compliance.

Download as PDF