|
Server and Network Management
Maintaining PCI compliance for your web site is more than just keeping antivirus software and Windows Updates current. Regular inspection, monitoring, and log file analysis are just a few of the regular tasks that are required. All of our PCI hosting packages include managed services for the tasks required to keep your web site in compliance.
- Server Management
- Weekly Log Checks
- Monthly Windows Updates
- Firewall Configuration and Management
- Intrusion Detection System and Intrusion Alert System Configuration and Management
- Yearly On Site Audits by Visa Approved QSA
- Quarterly PCI Compliance Scans
- Application and Environment Documentation
We offer both shared managed hosting and dedicated hosting for the PCI environment.
Web Application Management
Another PCI requirement calls for the development of secure web applications. Applications must adhere to the latest security best practices and must pass a variety of security related checks before they can be called PCI compliant. As part of our PCI Web Hosting Managed Services, we will provide a security assessment to assist you with ensuring that your application meets all of the PCI requirements. Our security assessment checks for these PCI requirements:
- Integration of OWASP Best Practices
- Prevention SQL Injection and Cross Site Scripting Attacks
- Data Encryption and Encryption Key Management Practices
- Use of Querystrings and Form Fields
- Input Validation
- Password Management Practices
- Application Documentation
If you have an existing web application that is not hosted in a PCI Compliant Environment, or if you're not sure if the application is PCI compliant, we will perform a security assessment of your code to ensure all requirements are met. Our report will help you quickly identify any areas needing attention and we will work with you to develop a remediation plan. Once the security assessment is complete and the application fully documented, conversion to our datacenter is quick and easy.
|