How security architecture helps you with PCI
Oct 12th, 2014 by Jesper Kråkhede
I was advising a QSA recently that struggled to understand a mainframe tokenisation solution. She could not her head around the technology hence she couldn´t review it. I asked her if she had conceptualised it but that had not occurred to her.
To solve the situation I brought forward my architecture views on PCI and showed here how I had conceptualised all of PCI. From those we collected the conceptual components needed for a tokenisation and how it should work.
Now it became a lot easier for her to identify the matching components in the mainframe and instead of giving up she solved the assignment in just a few days. The power of a good architecture should not be underestimated.