Chennai, December 14, 2010: Financial Software Testing pioneers, Thinksoft Global Services Ltd. has informed that they are compliant with Payment Card Industry Data Security Standards (PCI DSS). Control Case, a Qualified Security Assessor certified by the PCI Security Standards Council conducted the audit at Thinksoft's Tidel Park premises and issued a certificate of compliance. Thinksoft's Quality Management Systems and the Information Security Management Systems are certified (under ISO 9001:2008 standards and ISO 27001:2005 respectively) and the PCI DSS compliance denotes an increased maturity in the process and system efficiency.
PCI DSS is a mature information security system that mitigates emerging data security risks and provides assurance on protection of customer's sensitive data in line with the industry best practices. Apart from resulting in increased customer confidence and trust, this also saves the clients' time and effort in assessing Thinksoft's Information Security capabilities, prior to making outsourcing decisions.
PCI DSS Standards ensure Protection of Sensitive customer data used for testing purposes in line with industry best practices through meticulous deployment of test data, upfront escalation of the implication of using live data and provision of remedial measures, awareness training across the organization, building network perimeter security controls with 24x7 monitoring and alert mechanisms, encryption of sensitive information and multilayered access control mechanisms.
Commenting on the achievement Mr.A.V.Asvini Kumar, Managing Director, Thinksoft Global Services Ltd., said, "With the compliance requirements increasing by the day, Thinksoft by virtue of PCI DSS compliance has implemented stringent proactive and preventive controls in order to protect a customer's sensitive information thus leading to mutually beneficial cross-border compliance requirements." He added "Customers also benefit from the reduced cost of conducting onsite assessments at Thinksoft offshore delivery centers. Moreover, there is ready availability of testing resources who have undergone a stringent Background Verification Processes (and trained on PCI DSS requirements) for immediate deployment".
