PCI Penetration TestTechnical testing of your PCI environment
FRSecure is a full service information security consulting and management company. If you need anything security related, from assessments to social engineering to security training to policy development etc., give our team of experts a call and find out how to get our experience working for you.
Do I need a PCI Penetration Test?
Not sure. There are specific circumstances that require PCI penetration test. If you’re level 1, then yes, you need one. We will help you determine if a PCI penetration test is required.
What is a PCI Penetration Test?
A PCI Penetration Test involves the technical testing of your internal information resources and externally accessible networks, firewalls, intrusion detection systems, routers, switches, servers, and services as they pertain to your credit card environment.
In simple terms, PCI penetration testing involves:
- Attempt to break into the credit card environment from the internet (external)
- Attempt to break into the credit card environment from the network (internal)
- Attempt to break something within the credit card environment (internal)
A more accurate description of the requirement:
Penetration testing is to be conducted in compliance with PCI DSS Requirement 11.3:
11.3 Perform external and internal penetration testing at least once a year and after any significant infrastructure or application upgrade or modification (such as an operating system upgrade, a sub-network added to the environment, or a web server added to the environment). These penetration tests must include the following:
- 11.3.1 Network-layer penetration tests
- 11.3.2 Application-layer penetration tests
How much does a PCI Penetration Test cost?
The cost of a PCI Penetration Test is largely dependent on the size and complexity of the environment. We take into account your organization’s size, the PCI environment, complexity, industry, compliance requirements, and most importantly, your actual needs.
Because of our tailored approach, all you need to do is spend a few minutes on the phone with our team to make sure we are delivering exactly what you need and want.