{"id":65137,"date":"2026-04-13T10:42:29","date_gmt":"2026-04-13T08:42:29","guid":{"rendered":"https:\/\/www.usd.de\/?p=65137"},"modified":"2026-04-13T10:42:32","modified_gmt":"2026-04-13T08:42:32","slug":"amadeus-pci-dss-compliance-complex-system-landscape","status":"publish","type":"post","link":"https:\/\/www.usd.de\/en\/amadeus-pci-dss-compliance-complex-system-landscape\/","title":{"rendered":"Amadeus and usd: Achieving PCI DSS Compliance Across a Complex System Landscape"},"content":{"rendered":"\n<p>When global travel technology meets strict security standards, complex projects emerge with many moving parts. Amadeus, one of the world\u2019s leading providers of software and data solutions for the travel industry, sits at the heart of an ecosystem that connects airlines, airports, hotels, mobility providers, and countless other players. The company\u2019s technology powers the global travel and tourism industry and enables a fast\u2011moving, digitally driven market.<\/p>\n\n\n\n<p>In this environment, protecting sensitive payment data and complying with international security standards are critical. Amadeus\u2019 broad portfolio of products and systems creates a highly complex architecture that must be implemented and operated in full compliance with PCI DSS. This is where a partner is needed who maintains a clear overview and ensures security even within long\u2011established structures. Amadeus relied on usd AG to implement these requirements securely and effectively: an experienced specialist who leads organizations to PCI compliance through technical expertise, clear structure, and reliable project management.<\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">A Complex Landscape Needs Clear Direction<\/h2>\n\n\n\n<p>Amadeus\u2019 payment infrastructure spans a wide range of products, technologies, and services that are tightly interconnected. At the same time, the future\u2011dated requirements of <a href=\"https:\/\/www.usd.de\/en\/pci-payment-security\/pci-dss\/\" data-type=\"link\" data-id=\"https:\/\/www.usd.de\/en\/pci-payment-security\/pci-dss\/\">PCI DSS<\/a> v4.0.1 were approaching and called for early, in\u2011depth preparation. The transition to the cloud also raised organizational and technical questions. The challenge resembled a mosaic: many individual pieces that only form a coherent picture when placed correctly. This made a structured approach, deep industry knowledge, and clear guidance throughout the assessment essential.<\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">The Path Forward: Structure, Clarity, and a Joint Team<\/h2>\n\n\n\n<p>To make this complexity manageable, Amadeus and usd AG moved forward together in close alignment, with full transparency and clearly defined roles. The collaboration was shaped by open communication and an assessment approach precisely tailored to Amadeus\u2019 organizational structure.<\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:70%\">\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Our experience from numerous PCI projects in the travel industry helped us to identify Amadeus' specific requirements quickly. The company's consistent commitment to high security standards and clear prioritization of tasks and responsibilities was particularly crucial for the project.<\/p>\n\n\n\n<div style=\"height:8px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-small-font-size\"><em>Tobias Weber, Managing Consultant and QSA, usd AG<\/em><\/p>\n<\/blockquote>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:30%\">\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"600\" src=\"https:\/\/www.usd.de\/wp-content\/uploads\/Tobias-Weber.png\" alt=\"\" class=\"wp-image-48990\" style=\"width:160px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<p>Key elements of the approach:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Tailored assessment approach aligned with business structures<\/li>\n\n\n\n<li>Open dialogue on technical and organizational issues<\/li>\n\n\n\n<li>Targeted preparation for future-dated requirements from <a href=\"https:\/\/www.pcisecuritystandards.org\/standards\/pci-dss\/\" data-type=\"link\" data-id=\"https:\/\/www.pcisecuritystandards.org\/standards\/pci-dss\/\" target=\"_blank\" rel=\"noopener\">PCI DSS v4.0.1<\/a><\/li>\n\n\n\n<li>Consideration of cloud architecture in the context of forthcoming requirements<\/li>\n<\/ul>\n\n\n\n<p>This close alignment ensured that the project progressed in a controlled manner while also establishing a shared understanding of priorities.<\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">The Result: Certification Achieved. Long\u2011Term Resilience Strengthened.<\/h2>\n\n\n\n<p>The results are clear: Amadeus achieved PCI DSS v4.0.1 certification. This sends a strong signal that even widely distributed and complex system landscapes can be auditable if processes are clearly structured and teams work together precisely.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>The certification marks the successful completion of an important transformation for us. Our goal was to reinforce a scalable, future\u2011ready PCI DSS framework that strengthens our products for the long term. Working with usd AG was a decisive factor in achieving this. In joint sessions, we clarified expectations, refined processes, and made the entire audit process more transparent and efficient. The openness and expertise with which usd AG supported us proved especially valuable. They helped reduce complexity, build trust, and lay the foundation for continuous compliance. Now we are taking the next step forward, with clear structures, strong collaboration, and a security posture that continues to grow.<\/p>\n\n\n\n<div style=\"height:8px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-small-font-size\"><em>Michael Johannes, Director of PCI DSS Program and Head of Governance Security &amp; Compliance (Amadeus Corporate Information Security Office)<\/em><\/p>\n<\/blockquote>\n\n\n\n<p>After the assessment is before the assessment: The next recertification is already planned. The focus will be on the continuous implementation of future-dated requirements and the further development of cloud environments.<\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">About Amadeus<\/h2>\n\n\n\n<p>Amadeus makes the experience of travel better for everyone, everywhere by inspiring innovation, partnerships and responsibility to people, places and planet.<\/p>\n\n\n\n<p>Our technology powers the travel and tourism industry. Inspiring more open ways of working. More connected ways of thinking, centered around the traveler. Our open platform connects the global travel and hospitality ecosystem. From startups to big industry players and governments too. Together, transforming how travel works. We are working to make travel a force for social and environmental good. A collective responsibility to protect and improve the people and places we visit, ensuring travel continues to make positive contribution to our world.<\/p>\n\n\n\n<p>We apply innovation to meet new needs, to solve real challenges. Our truly diverse global workforce, made up of 150 nationalities, is passionate about travel and technology. We are an IBEX 35 company, listed on the Spanish Stock Exchange under AMS.MC. We have also been recognized by the Dow Jones Sustainability Index for the last 13 years.<\/p>\n\n\n\n<p>Amadeus. It\u2019s how travel works better. Learn more about Amadeus at <ins><a href=\"http:\/\/www.amadeus.com\" target=\"_blank\" rel=\"noopener\">www.amadeus.com<\/a><\/ins><\/p>\n","protected":false},"excerpt":{"rendered":"<p>When global travel technology meets strict security standards, complex projects emerge with many moving parts. Amadeus, one of the world\u2019s leading providers of software and data solutions for the travel industry, sits at the heart of an ecosystem that connects airlines, airports, hotels, mobility providers, and countless other players. The company\u2019s technology powers the global [&hellip;]<\/p>\n","protected":false},"author":117,"featured_media":65126,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[462,373,394],"tags":[15097,434,6471,496,440,6472,13251],"class_list":["post-65137","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-customer-stories-en","category-news-en","category-pci-en","tag-payment-security-in-travel","tag-pci-en","tag-pci-audit-en","tag-pci-compliance-en","tag-pci-dss-en","tag-pci-dss-assessment-en","tag-success-story-en"],"_links":{"self":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/posts\/65137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/users\/117"}],"replies":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/comments?post=65137"}],"version-history":[{"count":5,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/posts\/65137\/revisions"}],"predecessor-version":[{"id":65215,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/posts\/65137\/revisions\/65215"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/media\/65126"}],"wp:attachment":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/media?parent=65137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/categories?post=65137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/tags?post=65137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}