Perbadanan Tabung Amanah Islam Brunei (Perbadanan TAIB) has achieved PCI DSS 4.0 certification, reaffirming its commitment to maintaining the highest standards of payment data security.
Securing payment card data is crucial for businesses in the Sultanate handling card transactions.
The latest Payment Card Industry Data Security Standard (PCI DSS) version 4.0 introduces enhanced security measures to address evolving cyber threats.
PCI DSS 4.0 is the latest iteration of the global standard designed to protect cardholder data. It emphasises flexibility, risk-based approaches, and continuous security improvements.
Key changes include enhanced authentication requirements, a broader encryption scope, and a stronger focus on continuous monitoring and risk assessments.
PCI DSS 4.0 provides robust security controls, including network security, data encryption, strong access controls with multi-factor authentication, continuous monitoring and security testing.
As an Issuer of MasterCard Credit and Debit Cards, Perbadanan TAIB underwent a comprehensive audit of its systems, policies, and procedures, achieving full PCI DSS compliance on December 14, 2024.
The milestone is crucial in protecting payment card data and reinforcing customer trust.
Perbadanan TAIB Managing Director Datin Hajah Hasnah binti Haji Ibrahim emphasised the institution’s dedication to upholding the highest security standards.
“Achieving PCI DSS certification for the second consecutive year underscores our unwavering commitment to cybersecurity and data protection. We take great pride in maintaining these rigorous standards, ensuring the safety and security of our clients’ information as we navigate the ever-evolving digital landscape.”
The PCI DSS 4.0 assessment was conducted by SISA InfoSec Pte Ltd, a global cybersecurity consulting firm specialising in data protection and regulatory compliance.
Perbadanan TAIB’s attainment of PCI DSS 4.0 compliance demonstrates its commitment to maintaining the highest levels of data security. PCI DSS compliance is an ongoing process that requires continuous vigilance, adaptation to emerging threats, and proactive risk management.
