Verisys for PCI DSS Compliance

Demonstrate compliance with PCI DSS, with automatic tagging of events and built-in reports

The Payment Card Industry Data Security Standard (PCI DSS) was introduced in 2004 by the Payment Card Industry Security Standards Council (PCI SSC) in order to enhance the protection of cardholder data and prevent credit card fraud.

The PCI Data Security Standard consists of a series of requirements which determine the level of technical and operational compliance that must be adhered to by any organisation that stores, processes or transmits cardholder data.

Non-compliance of the PCI DSS could result in the loss of credit card payment ability or substantial fines

PCI Security Standards Council

Great product - really helped with our PCI compliance

Demonstrate Compliance

Non-compliance of the PCI DSS could result in the loss of credit card payment ability or substantial fines. Therefore it is crucial that any company participating in the storage, processing or transmission of credit card data becomes compliant.

Verisys Integrity Suite provides a simple solution to many of your PCI DSS compliance requirements. Set out below are a number of PCI DSS requirements and an explanation to help you understand how Verisys addresses these requirements.

Key File Integrity Monitoring Requirements

PCI DSS Requirement 11.5

"Deploy file-integrity monitoring software to alert personnel to unauthorised modification of critical system files, configuration files, or content files; and configure the software to perform critical file comparisons at least weekly"

PCI DSS Requirement 10.5.5

"Use file-integrity monitoring or change-detection software on logs to ensure that existing log data cannot be changed without generating alerts (although new data being added should not cause an alert)"

Verisys Integrity Suite detects changes to files and Windows registry objects - in real-time. Reports can be scheduled to run automatically, ensuring key personnel are notified of authorised, or non-compliant changes.

Verisys also integrates with any SIEM or Log Management solution, seamlessly connecting with your existing security and compliance infrastructure, including QRadar, Splunk, Exabeam Fusion, RSA NetWitness, Microsoft Sentinel, ArcSight, Log Rhythm and more.

In addition, Verisys Integrity Suite automatically tags events that are relevant to PCI DSS compliance requirements, allowing you to clearly demonstrate compliance with the built-in reports.

Additional Requirements

PCI DSS Requirement 10.5.3

"Promptly back up audit trail files to a centralized log server or media that is difficult to alter"

PCI DSS Requirement 10.5.4

"Write logs for external-facing technologies onto a log server on the internal LAN"

PCI DSS Requirement 10.7

"Retain audit trail history for at least one year, with a minimum of three months immediately available for analysis (for example, online, archived, or restorable from back-up)"

Verisys Integrity Suite stores a detailed audit trail of all changes, allowing you to see what was changed, where it was changed, when it was changed, and even who made the change. Verisys also seamlessly integrates with any SIEM or Log Management solution. A data rentention policy can be configured in just a few clicks, ensuring a full audit trail is maintained for as long as necessary.