We Did It! ControlCase Is Now A PCI Software Security Framework Assessor Company!

This latest achievement qualifies ControlCase to assess vendors’ software lifecycle management practices and Certify payment software products to the PCI Secure Software Standards.

The software security framework program was launched by the PCI Security Standards Council (PCI SSC) as a solution to support the PCI Software Security Framework (SSF), a collection of standards and programs for the secure design, development, and maintenance of payment software.

The PCI Secure Software Standard provides a baseline of requirements with corresponding assessment procedures and guidance for building secure payment software. The set of security requirements and associated test procedures are to ensure payment software adequately protects the integrity and confidentiality of payment transactions and data. This standard replaces PA DSS which is phasing out by June 2021.

The ControlCase methodology for providing the PCI Secure Software assessment is complimented by the company’s partnership approach to assessments – the project begins with a thorough scoping and gap analysis phase followed by remediation support and final assessment phase. The service is also supported by smart technology for security testing and a secure portal for evidence collection.

For more information on ControlCase offerings and services, please contact Kimberly Simon at ksimon@controlcase.com

The PCI Software Security Framework (SSF) is a collection of standards and programs for the secure design, development, and maintenance of payment software. The PCI Secure SLC Standard provides a baseline of requirements with corresponding assessment procedures and guidance to help payment software vendors design, develop, and maintain secure payment software throughout the software lifecycle.

"One Audit" for IT Security Compliance Explained!

The One Audit solution provides the ability for organizations to perform a single audit and certify/comply with multiple regulations including but not limited to PCI DSS, ISO 27001, BITS FISAP, HIPAA, SOC 1/2/3, and FISMA NIST 800-53.

About the PCI Software Security Framework

The PCI Secure SLC Standard provides a baseline of requirements with corresponding assessment procedures and guidance to help payment software vendors design, develop, and maintain secure payment software throughout the software lifecycle. Enabling organizations to build more secure payment software.

Quick Read? 4 Ways to Use Automation for IT Security Compliance!

4 ways to use automation for making compliance business as usual within your organization. This will help you maintain compliance with regulations including PCI DSS, SOC 1, SOC 2, HIPAA, NIST 800-53 and ISO 27001

ControlCase Named 2020 TAG Cyber Distinguished Vendor

ControlCase, a leading provider of IT Security Certifications and Continuous Compliance Services, announces its selection by TAG Cyber as a Distinguished Vendor in this year’s 2020 Security Annual. ControlCase is part of an industry collective of prominent vendors supporting the democratization of cyber security research and advisory materials.

PCI DSS and PA DSS Compliance - June 2018