With our remote services we can examine
your network using our award winning SAINT vulnerability
scanner, and expose where an attacker could breach your
network.
Then using
we
prove without a doubt that the vulnerability exists!
Find out why our approach of combining both an automated
approach, and if needed, a manual solution is unique today's
Network Security testing.
|
|
 |
Payment
Card Industry Data Security Standard (PCI-DSS)
|
All merchants who accept payment
cards (including online, mail, and phone orders) need to comply with
the Payment Card Industry (PCI) data security standard (DSS). The
PCI DSS was developed as a guideline to help merchants prevent credit
card fraud, hacking, and other security threats. PCI requires BOTH
vulnerability assessment and penetration testing. Lynjonic provides
integrated vulnerability assessments plus penetration testing, making
us the ideal solution for PCI compliance.
Lynjonic is approved to perform External and Internal Penetration
and Vulnerability tests to meet PCI-DSS requirements.
As an information security company our team has experience conducting
assessments ranging from Family Owned Businesses, Medical Offices,
Banks, Corporate Information Security, to Federal Security Research.
Lynjonic performs controlled hacking exercises or penetration tests
against networks (wired and wireless) and application environments.
This exercise often uncovers holes or flaws in an environment that
was thought to be secure.
Lynjonic personnel are consistently asked to evaluate various IT environments.
Lynjonic's penetration testing services will satisfy your company's
PCI requirement 11.3:
"Penetration testing should be performed at least annually
and anytime there is a significant infrastructure or application upgrade
or modification (for example, new system component installations,
addition of a sub-network, or addition of a web server). What is deemed
“significant” is highly dependent on the configuration of a given
environment, and as such cannot be defined by PCI SSC. If the upgrade
or modification could impact or allow access to cardholder data, then
it should be considered significant. Significance within a highly
segmented network where cardholder data is clearly isolated from other
data and functions is very different than significance in a flat network
where every person and device can potentially access cardholder data.
As a security best practice, all upgrades and modifications should
be penetration-tested to ensure that controls assumed to be in place
are still working effectively after the upgrade or modification."
Source:
Information Supplement: Payment Card Industry Data Security Standard
(PCI DSS) Requirement 11.3 Penetration Testing
|