PCI-Compliant File Transfer
Facilitate secure internal and external file transfers containing PII
Your Challenge
The Long Way to PCI Compliance
If your business deals with credit card payments, you must prioritize PCI compliance—an essential part of running your business securely and efficiently. PCI compliance is a critical step in protecting your customers' or partners' payment card data and an equally important step in protecting your business from the dire consequences of a data breach.
What is PCI DSS?
The Payment Card Industry Data Security Standard (PCI DSS) is a global benchmark for securing cardholder data. This comprehensive standard includes twelve essential requirements organized into six key areas, ensuring robust protection for data at all stages.
Who is PCI DSS for?
PCI DSS applies to any entity that handles credit card data. This includes merchants, financial processors, point-of-sale vendors, banks, credit unions, and other financial institutions involved in storing, processing, or transmitting payment information.
Our Solution
Progress MOVEit Enables PCI Compliance
Progress MOVEit is the trusted solution for achieving and maintaining PCI compliance. Specifically designed for secure data transfer, MOVEit helps financial institutions and businesses like yours adhere to the critical PCI requirements for data transfer:
- Secure Applications & Systems: Ensure your applications and systems are safeguarded.
- Protect Data at Rest: Keep cardholder data secure when stored.
- Control Data Access: Regulate who has access to sensitive cardholder data.
- Encrypt Data in Transit: Securely encrypt data while it's being transferred.
To verify MOVEit's PCI compliance, you can examine the latest audit report in our Security Center.
Maintain Network Security
MOVEit operates within a multi-firewall network, separating data into secure trust zones. Whether deployed in the DMZ or an internal network, MOVEit ensures secure connections and data integrity.
Better Protect Cardholder Data in Transit and at Rest
MOVEit employs advanced encryption methods, including secure FTP, HTTPS, and robust cryptographic software validated by FIPS 140-2 and NIST, to keep data safe both in transit and at rest.
Implement Strong Access Control Measures
MOVEit allows users to be designated as belonging to a specified role. Each role has an appropriate level of privilege. MOVEit Transfer also allows for the specific assignment of folder permissions, protocol access restrictions, IP address restrictions and other limited rights. Passwords and keys are encrypted using secure SSL/TLS and SSH2.
Maintain a Vulnerability Management Program
MOVEit integrates with external scanning tools to prevent the transfer of infected files and regularly updates its security features to protect against new threats.
Regularly Monitor and Test Networks
With comprehensive audit logging and controlled access to records, MOVEit provides unparalleled visibility into your data transfer activities, helping you stay compliant and secure.
