Thinksoft implements PCI DSS control

Financial Software Testing
pioneers, Thinksoft Global Services has announced that they are
compliant with Payment Card Industry Data Security Standards (PCI
DSS). Control Case, a Qualified Security Assessor certified, by the
PCI Security Standards Council conducted the audit at Thinksoft's
Tidel Park (Chennai) premises and issued a certificate of compliance.
Thinksoft's Quality Management Systems and the Information Security
Management Systems are certified (under ISO 9001:2008 standards and
ISO 27001:2005 respectively) and the PCI DSS compliance denotes an
increased maturity in the process and system efficiency.

PCI DSS is a mature
information security system, that mitigates emerging data security
risks and provides assurance on protection of customer's sensitive
data in line with the industry best practices. Apart from resulting
in increased customer confidence and trust, this also saves the
clients' time and effort in assessing Thinksoft's Information
Security capabilities, prior to making outsourcing decisions.

PCI DSS Standards ensure
protection of sensitive customer data, used for testing purposes, in
line with industry best practices through meticulous deployment of
test data, upfront escalation of the implication of using live data
and provision of remedial measures, awareness training across the
organization, building network perimeter security controls with 24x7
monitoring and alert mechanisms, encryption of sensitive information
and multi-layered access control mechanisms.

Commenting on the
achievement, AV Asvini Kumar, MD, Thinksoft Global Services said,
“With the compliance requirements increasing by the day, Thinksoft
by virtue of PCI DSS compliance has implemented stringent proactive
and preventive controls in order to protect a customer's sensitive
information thus leading to mutually beneficial cross-border
compliance requirements.” He added, “Customers also benefit from
the reduced cost of conducting onsite assessments at Thinksoft
offshore delivery centers. Moreover, there is ready availability of
testing resources, who have undergone a stringent background
verification processes (and trained on PCI DSS requirements) for
immediate deployment.”