Download our April Website Security Report
The PCI Software Security Framework
Welgevonden Conservation Park
Being identified as a Common Point of Purchase (CPP) for fraudulent transactions increases stress on any business. We have the skills, technology and experience to help alleviate your concerns.
We’ve worked closely with the payment card industry since 2004 and formed close and trusted relationships with major card providers, while assisting a wide range of organisations, including central banks, payment processors, global retailers, and countless small e-commerce merchants.
When your business is compromised, time is of the essence. A delay in appointing a PCI Forensic Investigator could mean you remain exposed to more criminal behaviour. Our experience, technology and capabilities will give you what you need to rapidly bring the situation under control.
We handle as many as, or more PFI cases than any other forensic investigation teams globally and have the skills, capability and capacity to quickly assist you. Digital security is in our DNA and we love being able to help other businesses improve their online security.
We go the extra mile for our clients - helping them get their business back on track, quickly and securely.
We utilise our FGX-Web and Serengeti technology to:
• Immediately monitor the environment latent threats.
• Quickly carry out PFI forensic investigations.
• Enable rapid analysis and ongoing monitoring.
• Enable our team to work quickly, discreetly and in a minimally-intrusive manner.
Our technology helps to quickly get our clients secure and back up and running after a security breach.
PFI investigations are standard for any business that may have lost cardholder data. We have technical investigation expertise and "C-level" experience to guide organisations of all sizes through the challenges and hurdles that accompany a forensic investigation.
There are usually 7 steps to a PFI investigation:
• Determine the scope of your environment
• Collect evidence
• Create a preliminary report
• Conduct a forensic analysis
• Build a containment strategy
• Verify the containment
• Produce a final report
PFI Lite investigations are a Visa Europe initiative designed for small eCommerce businesses who may have been hacked and lost cardholder data. This is a scaled-down PFI Investigation designed to provide a remediation service specifically for smaller eCommerce merchants.
The key requirements of a PFI Lite Investigation are to:
• Ensure that the breach has been contained
• Support the migration to a hosted payment page
• Analyse the attack and identify the exposure period
• Conduct scans against the website to verify that it's secure
• Support the SAQ completion for PCI compliance purposes
• Produce a report for the Card Schemes
