nsslabs.com

Which products are best suited for cardholder data environments? Selecting security products to address the compliance requirements of the Payment Card Industry’s Data Security Standard (PCI DSS) is no small task. The NSS Labs PCI Suitability reports provide readers with empirically validated evidence about a product’s suitability for use in a payment card network (as defined by the PCI Security Standards Council). Compliance, however, does not equate to security, however. Please refer to our other product evaluations for more in-depth effectiveness information.

This detailed guide: 

• Identifies products capable of aiding compliance
• Identifies supported and unsupported DSS requirements in products
• Provides a standard baseline for evaluating products
• Helps meet compliance requirements quickly
• Shortens the time spent on assessments
• Improves merchant environment security & reduces risk of compromise

Product Reports on PCI-Suitability are comprehensive, and include:

• Validation of individual PCI DSS v1.2 requirements met by products
• Detailed test procedures used by NSS Labs for each requirement
• PCI-audit features such as logging & reporting
• Recommended configuration details to assist in secure product deployment
• Security effectiveness based on the recommended appropriate usage; e.g. Data Ceter, Retail Storefront,Perimeter, etc.