Helping the Payment Industry Comply with Latest Credit Card Security Standards: Compliance Support for PCI DSS v4.0

Shinjuku-ku, Tokyo, Japan April 1, 2022: BroadBand Security Inc. (President and Representative Director: Takashi Takizawa; hereinafter referred to as "BBSec" or “WE”) has announced that it will add PCI DSS v4.0 compliance support to the existing version as part of its PCI DSS consulting service.

Overview
PCI DSS*1 is a security standard established by credit card brands to protect credit card member information and ensure secure transactions. PCI DSS v4.0 was released March 31, 2022, as the first major upgrade in eight years and brought 64 new requirements in place.

There will be a transition period, and many PCI DSS compliant entities must maintain compliance with PCI DSS v4.0 while maintaining compliance with PCI DSS v3.2.1. Under these circumstances, BBSec has launched PCI DSS v4.0 compliance support consulting service with this release.

Overview of BBSec’s PCI DSS v4.0 Compliance Support Consulting Service

Phase 1	GAP Analysis Service or Simplified GAP Analysis Service
Phase 2	Compliance Support Consulting Services PCI DSS v4.0 compliant regulation reference set (sales and services) Compliance Support Service based on a Customized Approach introduced in PCI DSS v4.0
Phase 3	Walkthrough of last-minute measures On-site assessment services Compliance maintenance support consulting services
Phase 4	GAP Analysis Service or Simplified GAP Analysis Service

GAP Analysis Service significance and features
Why a GAP analysis service needed
The GAP Analysis service uses FIT and GAP analysis to identify the current state of the organization and the conditions required for PCI DSS v4.0 compliance. It is an important first step for planning a mid- to long-term roadmap after the GAP analysis.

Service Overview
1. Workshop: QSA*2 will provide an overview of the major changes in PCI DSS v4.0.
2. Interview: QSA*2 will conduct a Fit & Gap study to determine security level requirements.
3. On-site Inspection: QSA will check physical security.
4. Report: We will issue a Fit & Gap analysis report against the defined requirements.
5. Debrief Meeting: We will report non-compliant requirements and potential issues to management.

Service page URL
Please contact a sales representative or submit an inquiry form at https://cr.bbsec.co.jp/en/contact-bbsec

Service Price
Please contact a sales representative or submit an inquiry form at https://cr.bbsec.co.jp/en/contact-bbsec

The only PFI Forensic Investigator Company in Japan

BBSec will continue to be responsible for its activities as GEAR*3 and will continue to advocate for the future of payment security and safe operations for credit card security around the world, so that each organization can secure payment data globally and securely.

*1 Payment Card Industry Security Standards Council: A council established by five international credit card brands (VISA, MasterCard, American Express, Discover, and JCB) to promote the security of credit card transactions. An organization responsible for the operation and management of standards.
*2 QSA (Qualified Security Assessor): An assessor certified by the PCI SSC.
*3 Global Executive Assessor Roundtable (GEAR): An advisory committee consisting of senior executives from PCI SSC assessor companies.
The first Japanese company selected for the 2020-2022 Global Executive Assessor Roundtable, an international credit card industry security standards organization" (August 5, 2020).
https://www.bbsec.co.jp/news/pdf/20200805.pdf(Japanese)

https://www.bbsec.co.jp/news/pdf/20200805eng.pdf(English)

---

About BroadBand Security Inc. BroadBand Security, Inc. is a total security service provider that provides IT security assessment, operations, maintenance, and digital forensics. Since its establishment in November 2000 under the concept of "making Japan's IT network the most robust in the world," we have provided security support for IT services to a wide range of companies, from major corporations and telecommunication companies to IT ventures. We utilize our high-tech capabilities, extensive experience, and broad information gathering capabilities.
URLhttps://www.bbsec.co.jp/

For inquiries regarding this release, please contact
BroadBand Security, Inc., Corporate Planning Division
E-mail: press@bbsec.co.jp

Inquiries about this service
BroadBand Security, Inc., Global Business Division
E-mail: sales@bbsec.co.jp

Inquiry Form
https://cr.bbsec.co.jp/en/contact-bbsec