Stafford Associates’ network conforms to the following PCI compliance security standards:

Secure Network:

we use a dual tiered application firewall and network IDS to protect credit card information and use PCI regulated security practices.

Cardholder Data Protection:

we protect stored cardholder data and encrypt transmission of cardholder data across open networks. Vulnerability Management: we use and regularly update anti-virus software, develop secure applications, and maintain secure systems which provide PCI DSS compliance.

Access Control:

we restrict access to cardholder data and assign a dual factor token to each person with remote access.

Monitor and Test Networks:

we monitor all access to network resources and cardholder data and regularly test security systems and processes.

PCI compliance security standards have grown more demanding in recent years and Stafford Associates can help you comply with every part of the PCI code. At Stafford Associates, we have extensive experience working with clients to meet the most demanding PCI compliance security standards.

As a result, Stafford Associates has developed a wide range of services to meet PCI compliance security standards and the needs of the regulated marketplace including regulated and managed hosting services, application development, and consulting services.

PCI compliance security standards have requirements not just for application and server operations, but application development as well. Stafford Associates does not allow production data in a development environment and Stafford Associates’ development methodology is driven by our client’s business needs and Open Web Application Security Project (OWASP) guidlines.