Banks and payment card companies are increasing security requirements, scrutiny and penalties for not securing payment card information when processing payments and when storing card information. The new requirements become effective July 1, 2010.
We are pleased to let you know that your club solution with Active Club Management meets the PCI Compliance regulations (at no additional cost to you).
We work hard to be the leader in solutions for club management and are proud to let you know that Active Club Management is the first and only PCI compliant club solution on the market! As the PCI security rules apply to everyone, and the cost can be significant, we appreciate it if you share this with your friends and other businesses who want to secure their business and customer information.
The following required scans have been completed. The PCI REQUIRED historical logs of the scans are also maintained as required by the PCI specifications.
1) McAfee PCI Compliance check & historical logs 2) Network intrusion scanning & historical logs 3) Intrusion detection scanning & historical logs 4) Internal network vulnerability scans & historical logs 5) External network vulnerability scans & historical logs 6) Network vulnerability scans & historical logs 7) Intrusion detection system & historical logs 8) External and internal penetration testing & historical logs 9) Physical access to data logs & historical logs 10) Ongoing management & updates & historical logs 11) Physical audit trail of visitor activity & historical logs 12) Restriction for need-to-know access to information & historical logs 13) Required forced password change management & historical logs & historical logs
At minimum most scans are required to be performed quarterly. Active Club Management will continue to perform the scans and respond to any and all threats and updates that are found.
NOTE: If you host your own software and or hardware you are taking responsibility for everything down to making sure your software and hardware are PADSS compliant. If you use a hosted, licensed or purchased solution you should check with your provider for PCI compliance, the parts they support and where the responsibilities and costs fall back on you.
Free Resources PCI Compliance Guidelines: https://www.pcisecuritystandards.org/ PCI FAQ’s http://www.pcicomplianceguide.org/pcifaqs.php
Active Club Management has been PCI Compliant since the requirements were initially rolled out in 2005 and will continue to offer our clients PCI service and upgrades as they become available.
www.ActiveClubManagement.com
Edited by Theresa (Mon Jul 12 2010 09:38 AM)
|