Case Studies

Limit PCI DSS Audit Liability

Challenge
An industry leader in the global enclosures and thermal management market wanted to limit the PCI DSS audit exposure of their SAP card processing systems.  A consultative approach was required to analyze their existing processing needs and challenges to ensure required functionality was maintained while extraneous payment card details were migrated out of existing systems where possible.

Solution
After PrimeSys consultation and analysis, the solution was ultimately delivered in two parts.  The first was replacing all PANs in existing systems with tokens, utilizing Paymetric's XiSecureNet suite of products.  The second was migrating significant portions of existing customer private data, along with the actual processing of payment card transactions, offsite to Paymetric's XiPayNet hosted solution.

Results
With PrimeSys providing valuable, hands-on expertise and timely delivery of project assignments, the merchant was able to lower liability and long-term PCI DSS audit costs by moving from SAQ Validation Type 5 to SAQ Validation Type 1¹.

¹ https://www.pcisecuritystandards.org/saq/instructions_dss.shtml