CUPDATA Validated PCI DSS Compliant by Trustwave


CHICAGO, IL and SHANGHAI--(Marketwire - September 15, 2009) - China UnionPay Data Services Co., Ltd. (CUPDATA), China's largest third-party processor of bankcard accounts, has validated compliance with the Payment Card Industry Data Security Standard (PCI DSS). Trustwave, the leading provider of on-demand data security and payment card industry compliance management solutions to businesses and organizations throughout the world, performed the PCI DSS compliance validation.

PCI DSS is the payment card industry security requirement for entities that process, transmit and/or store cardholder data, and has been endorsed by all the major card brands -- Visa Inc., MasterCard Worldwide, Discover Network, American Express and JCB. Under the PCI DSS, payment service provider compliance requirements are segmented into two levels based on the number of transactions processed and/or transmitted annually.

To validate compliance with the PCI DSS, CUPDATA had to demonstrate compliance with 12 security requirements by thoroughly reviewing its IT environment and information security policies and procedures. To maintain their compliance, CUPDATA has enrolled in Trustwave's on-demand compliance management solution, TrustKeeper®, to have the necessary tools to support on-going compliance such as quarterly network vulnerability scans.

"Maintaining a secure environment has always been a priority for CUPDATA, but compliance validation with the PCI DSS is a foundation for our overall security posture," says Haijian Jiang, Assistant President at CUPDATA. "Trustwave's proprietary technology will help our organization implement long-term security solutions to help protect our customer's data."

"As the largest third-party processor in China, CUPDATA understands the need to protect the sensitive data involved in everyday commerce," says Robert J. McCullen, chairman and CEO of Trustwave. "By validating PCI DSS compliance, CUPDATA has shown that security is top of mind and protecting consumer data is taken very seriously."

"As the PCI DSS continues to take shape in our region, CUPDATA has taken a leadership role by validating and maintaining compliance," says Sophia Chen, director of Northern Asia Pacific for Trustwave.

Contact Information: MEDIA CONTACT: Rui Zhao China UnionPay Data Services +86 21-61068516 Michelle Genser Trustwave +1 312 873 7288