CyberSource, Trustwave Help Secure Electronic Payments

CyberSource (CYBS), a provider of electronic payment and risk management solutions; and Trustwave, provider of on-demand data security and payment card industry compliance management solutions, announced a partnership to provide payment security solutions to Trustwave and CyberSource merchants in the United States and Europe.

Both companies will contribute payment-security technologies and consulting services to help merchants streamline compliance validation with the Payment Card Industry Data Security Standard (PCI DSS).

PCI DSS is the payment card industry security requirement for entities that store, process or transmit cardholder data, and has been endorsed by all the major card brands, including Visa, MasterCard Worldwide, Discover Network, American Express and JCB. The PCI DSS is a framework for the secure handling of cardholder data.

Recognized as CyberSource's preferred Qualified Security Assessor, Trustwave will offer CyberSource merchants a comprehensive compliance validation program, including its Risk Profiler, an online portal that defines data security risk associated with credit card acceptance practices. Trustwave's Risk Profiler is the first stage of its TrustKeeper on-demand compliance management program. TrustKeeper provides merchants with access to tools necessary to validate PCI DSS compliance, including the Self-Assessment Questionnaire and quarterly network vulnerability scanning.

Trustwave also will work with CyberSource Global Services to provide merchants with application testing and other forensic services. Similarly, Trustwave will offer its merchants CyberSource Secure Storage and Hosted Payment Acceptance solutions to reduce the scope of PCI DSS compliance. That will remove payment data storage and handling from the merchant environment. Both will work to provide security remediation to address gaps in PCI DSS compliance.