Armana Systems | PCI DSS

ISO27001

PCI DSS

Penetration Testing

Financial Services

The international best practice standard for Information Security Management Systems (ISMS)

Expert services and consultancy to enable your organisation to attain compliance with the PCI DSS

Unbiased guidance revealing the true impact to your business from technical vulnerabilities in your infrastructure

Innovative, tailored solutions to help you acquire the equipment you need, when you need it.

Learn More

PCI DSS

To arrange a free initial consultation with one of our PCI DSS specialists call 01344 780000 now!

The Payment Card Industry (PCI) Data Security Standard (DSS) is a security standard that was created by the major credit card companies (American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International) to protect their customers and merchants from increasing identity theft and security breaches. If you store, process, or transmit payment card information you are required to comply with the PCI DSS.

Armana Systems is able to provide expert services and consultancy to enable your organisation to attain compliance with the PCI DSS and other best practice approaches to data security. Our unique experience allows us to undertake a gap analysis of your current situation in comparison with the PCI DSS and to recommend the procedural and technical actions necessary to obtain accredited compliance with the standard.

The requirements for becoming Payment Card Industry (PCI) Compliant are dependent upon the merchant level that a company falls under. Merchants are divided into four different levels based on the number of transactions they process throughout a year.

Level Criteria Requirements

1 Over 6 million transactions a year Merchants whose data has been compromised Annual Onsite Security Audit and quarterly network security scan

2 150,000 to 6 million transactions a year Annual Self Assessment Questionnaire
Quarterly Scan by an Approved PCI Scanning Vendor

3 20,000 to 150,000 transactions a year Quarterly Scan by an Approved PCI Scanning Vendor
Annual Self Assessment Questionnaire

4 Less than 20,000 transactions Need to report compliance but must maintain compliance.

The main control objectives for PCI compliance are as follows:

▪ Build and Maintain a Secure Network

▪ Protect Cardholder Data

▪ Maintain a Vulnerability Management Program

▪ Implement Strong Access Control Measures

▪ Regularly Monitor and Test Networks

▪ Maintain and Information Security Policy

Contact Details
Armana Systems LLP
Talbot House
High Street
Crowthorne
Berkshire
RG45 7AQ

Phone:	+44 (0)1344 780000
Fax:	+44 (0)1344 769240
Email:	info@armana.co.uk

		( (01344) 780000

		Home About Solutions Services Support Contact
		Home About Solutions Services Support Contact