Device Hardening and Continuous Compliance Monitoring CONTINUOUS COMPLIANCE

BCH Digital, an established provider of IVR-based call management services, is using New Net Technologies' (NNT) Change Tracker Enterprise solution to ensure the compliance of its telephone card payment service with the stringent Level 1 Payment Card Industry Data Security Standard (PCI-DSS).

Part of an elite group of Level 1 PCI-DSS approved service providers in the UK, BCH Digital offers telecommunications services to clients ranging from small start-up companies to large blue chip organisations; one of these being its PayTel hosted telephone card payment service through which it enables clients to securely process card payments. The stringency of the Level 1 PCI-DSS compliance is such that BCH Digital is independently audited annually against the most recent regulations, currently standing at around two thousand individual requirements; and must also pass external quarterly network scans. The security of the PayTel service is therefore a key focus for both BCH Digital and its clients.

Chris Johnson, Technical Manager, BCH Digital explains, "Part of the PCI compliance mandate requires organisations to ensure various file tracking and monitoring systems are in place. We were faced with a formidable obstacle in finding tracking software that could help us with our PCI compliance as well as being easy to use and full featured and could be readily integrated into our systems. Ultimately, we trialled several pieces of software and came down in favour of NNT"

"The differences between the alternative software we tried and NNT was extremely clear to see; NNT was very responsive from the outset and committed to everything we needed to go live with the solution immediately. Four years later, I'm pleased to say our relationship with NNT is as strong today as it was when we first started using their service. Their support is first class and they've always had a fast response time to any of our queries. In fact on one occasion during an audit, an assessor raised an issue so we decided to email NNT whilst the assessor was still with us. He was blown away that that within five minutes we had someone on the phone and everything had been resolved."

NNT makes PCI DSS compliance simple; combining device hardening, event log management, change and configuration management and file integrity monitoring into one, easy-to-use solution. Its Change Tracker™ system auditing and change detection solution provides fast and efficient auditing of all devices via hardening templates for all security and governance policies.

Mark Kedgley, CTO, New Net Technologies, adds, "As a company we are delighted that Change Tracker™ has given BCH Digital the confidence to deliver its telecoms software which has allowed them to grow as a business. Our security solutions allow businesses of all sizes and complexity to reduce their risk profile, and establish and maintain a hardened IT infrastructure in a simple and cost-effective manner."

Chris Johnson concludes, "Looking into the future, with NNT's solution we are sure that we will continue to pass PCI-DSS audits and continue to remain compliant. NNT is providing us with a high-class service and solution that is not only enabling us to deliver a business-critical level of security, but it is a key component of our – and our clients' – ongoing business growth."

Share this blog post

Products
USA Offices
New Net Technologies Ltd
Naples
9128 Strada Place
Naples, Florida, 34108
Atlanta
201 17th Street, Suite 300
Atlanta, Georgia, 30363.

Tel: 1-888-898-0674
email USinfo@nntws.com
NNT Logo
UK Office
New Net Technologies Ltd
Spectrum House, Dunstable Road
Redbourn,
St Albans

Herts
AL3 7PR

Tel: 08456 585 005
Fax: 08456 122 031
email info@newnettechnologies.com
Connect with NNT
Google+ Linkedin Twitter - Change Tracker Facebook rss feed YouTube
Sign up to NNT's IT security and compliance monthly newsletter. Get breaking security news, how-to tips, trends and commentary direct to your inbox.

Sign up to the NNT newsletter