News _

Awarded PCI DSS Certification

SERMEPA MEETS TOUGHEST SECURITY STANDARDS FOR CARD DATA

Madrid, 25th June, 2009

SERMEPA, as a card payment and processing services provider, has been awarded certification for its adherence to Payment Card Industry Data Security Standards (PCI DSS) by from an approved standards company. The certification is an assurance that SERMEPA’s entire infrastructure complies with all the data security and protection requirements set by the PCI Security Standards Council and accepted by major international card brands.

PCI DSS is the programme that defines the account and card security requirements that must be met by organizations which process, transmit and store account and card data. There are 12 requirements, associated with the following principles:
  • Build and maintain a secure network
  • Protect information about the cardholder
  • Implement and maintain vulnerabilities management programme
  • Implement solid network access control measures
  • Monitor and regularly evaluate the networks
  • Develop and maintain an information security policy
The security standards were initially developed by Visa and MasterCard on a global level and were subsequently adopted by Amex, Discover y JCB, all of them now represented on the PCI Security Standards Council, whose aim is to uphold these standards and promote their adoption.

The text of the certificate appears below: