usd AG once again appointed member of the international PCI SSC GEAR

usd AG News, PCI Security Services

usd AG was again appointed to be part of the Global Executive Assessor Roundtable (GEAR). Since 2018, the GEAR has been facilitating a direct exchange between PCI assessors and the PCI Security Standards Council (PCI SSC) Senior Leadership. Every two years, leading Assessor Companies from all parts of the world are selected from a large number of applicants to give …

PCI DSS version 4.0: What is the current status?

usd AG News, PCI Security Services

There is still a lot of work going on on the new version of the security standard for credit card data PCI DSS. The PCI Security Standards Council (PCI SSC) is planning to replace the previous version PCI DSS v3.2.1 with the upcoming version PCI DSS v4.0. PCI experts at usd AG have been following the development very closely and …

usd AG accredited as Software Security Framework Assessor Company

usd AG News, PCI Security Services

usd AG has been accredited by the PCI Security Standards Council (PCI SSC) as a Software Security Framework Assessor Company and is now officially listed on the PCI SSC website. This enables usd AG to assess and certify software products throughout Europe according to the Secure Software Standard of the SSF. Torsten Schlotmann, Managing Security Consultant at usd AG: “The …

Efficient Compliance Audits of Your Service Providers

usd AG News, PCI Security Services, Security Consulting

Outsourcing certain tasks to external service providers has become an integral part of business operations. Whether it’s data center services, software development, the use of cloud services or call center services: cooperation with third parties is a valuable part of your own business operations. However, it also means that you have to rely on others and thus delegate some of …

Current Information on Remote Assessments according to PCI Security Standards

usd AG News, PCI Security Services

In order to slow down the spread of the coronavirus, many countries have imposed movement restrictions and travel bans. Of course, we adhere strictly to these regulations. To ensure that your certification projects in accordance with the PCI Security Standards do not come to a complete standstill during this period, we are currently converting our on-site assessments to remote assessments …

A step towards more security: Our expert’s examination of the PCI Software Security Framework

usd AG News, PCI Security Services

In January 2019, the PCI Security Standards Council first announced the introduction of the new Software Security Framework (SSF) which currently includes two new standards: The Secure Software Lifecycle Standard (Secure SLC) and the Secure Software Standard. With the respective certifications, payment software providers can prove that both their payment software as well as their development processes meet comprehensive and …

noris network AG Successfully Certified According to PCI DSS

usd AG News, PCI Security Services

usd AG confirms secure handling of credit card data in data centers Whether for start-ups or global players – a PCI certification project can pose a major challenge to any business. This makes it all the more enjoyable for us to look back on the success we have achieved together with our clients. After all, nothing provides better insights into …

PCI DSS – What Is the Scope and How to Reduce It?

usd AG News, PCI Security Services

In this short series we provide you with useful facts about the Payment Card Industry Data Security Standard. Be well informed on your PCI DSS certification. What is the PCI DSS scope? The scope of a PCI DSS certification includes all components of a company’s environment that must meet the PCI DSS control objectives. In May 2017, the PCI Security …

PCI DSS – What Is Compliance?

usd AG News, PCI Security Services

In this short series we provide you with useful facts about the Payment Card Industry Data Security Standard. Be well informed on your PCI DSS certification. When is a company PCI DSS complaint? A company achieves PCI DSS compliance (or: conformity) if it meets all PCI DSS requirements that apply to it. While there is no legal requirement for PCI …