Payment Card Industry Data Security Standard (PCI DSS) regulates any business that collects or processes cardholder data. The overall objective of PCI compliance is to propagate data protection techniques and mitigate the risk of credit and debit card fraud, and to ensure the security and privacy of financial and personal information.
Failure to meet PCI DSS requirements may lead to substantial penalties and fines, suspension of credit card acceptance by a merchant’s credit card account provider, possible civil litigation from breached customers and other opportunity costs due to brand/reputation damage.
PCI has set six goals with twelve steps in Data Security Standard for its Merchants & Processors category. Further more, it has strict compliance validation and reporting requirements that involves verification and confirmation that the recommended security controls and procedures are in place and properly followed.
Teramind for PCI DSS helps organizations meet these compliance goals with its extensive user activity monitoring, data exfiltration protection, audit, reporting and forensics capabilities.
estimated average cost of a data breach by 2020 as more business infrastructure gets connected. Source: Cybiant.
is the maximum penalty per incident for security breaches when merchants are not PCI DSS compliant.
credit card numbers were exposed in 2017, an 8X increase over 2016. Source: Experian.
is the value of payment card fraud losses in the USA in 2018. Source: Statista.
Teramind provides essential security monitoring capabilities to help you detect, investigate, and report on data breaches within retail/e-commerce or other card processing environments.
Teramind identifies cardholder data, financial and other sensitive information in structured and unstructured data across organization data stores, leveraging fingerprinting, OCR and other advanced capabilities.
Teramind leverages its activity monitoring and data loss prevention capabilities to defend sensitive data from unauthorized access, sharing, attack and misuse.
Teramind’s powerful behavior-based policy and rules engine casts a strong detection net over the entire organization, allowing for quick detection of insider threats and data breach incidents before it happens.
Real-time notification and immediate actions proactively defend against data exfiltration, malicious or accidental insider threats and data breaches. In case of an incident, pinpoint the exact cause and source of the incident with audit and forensic data in minutes.
Provide burden of proof and meet record keeping requirements with detailed incident reports, alerts and session recordings. Exportable reports can be shared with Internal Security Assessor (ISA), Qualified Security Assessor (QSA) or used for Self-Assessment Questionnaire (SAQ) purposes.
|
Instant activation of PCI DSS specific policies & rulesTeramind comes with PCI DSS specific policies and rules addressing many of the steps necessary to maintain the Data Security Standard for Merchants & Processors. More policies and rules can be created with powerful Policy Editor. |
|
Built-in data discovery and classification100s of templates for cardholder data, sensitive Personally Identifiable Information (PII) and Personally identifiable Financial Information (PIFI). Automated discover of content on the fly with advanced OCR and digital fingerprinting. |
|
Access control and monitoringGranular user activity monitoring, unique IDs, layered access control for local, network and Cloud resources are just a few examples how Teramind gives you full visibility and control over sensitive data. |
|
Automated vulnerability managementAdvanced behavior-based rule engine automatically prevents data loss and exfiltration events. Immediately get notified about harmful user activity or lock out user before any malicious or fraudulent attempt. |
|
Reporting and auditDetailed rule violation alerts, risk analysis reports, immutable logs and audit trails can serve as valuable sources for compliance reporting. Teramind makes your finding and observation tasks easier by identifying where card data is stores, how it’s accessed and finally prove that you have a system in place to enforce PCI data protection rules. |
On-premise - control the Teramind implementation in its entirety, stay off-cloud if that’s your firm’s operational model, leverage LDAP groups and users to identify which users and groups to apply which policies and rules to.
Teramind Private Cloud - use your own secure, scalable private cloud implementation including AWS, Google Cloud, Azure and more.
Teramind Cloud - trust us the management of the Teramind deployment and infrastructure. Only install Teramind Agents on the machines you want to monitor and set up your users, policies and rules and let us take care of the rest.