CHICAGO AND HANGZHOU, CHINA (July 28, 2009) - Alipay, China's leading online payment gateway, has selected Trustwave to provide Payment Card Industry Data Security Standard (PCI DSS) compliance validation services. Trustwave is the leading provider of on-demand data security and payment card industry compliance management solutions to businesses and organizations throughout the world.
PCI DSS is the payment card industry security requirement for entities that store, process or transmit cardholder data, and has been endorsed by several major card brands - Visa Inc., MasterCard Worldwide, Discover Network, American Express and JCB.
Alipay has enrolled in Trustwave's on-demand compliance management solution TrustKeeper® to access the necessary automated tools to support on-going compliance such as quarterly network vulnerability scans.
Trustwave will also perform an external penetration test to identify any network vulnerabilities and exploitable security flaws that could serve as an entrance point for a malicious attack. The penetration test will help Alipay determine the necessary steps needed to secure their environment and remediate any threats to help ensure secure transactions for all the customers using their payment gateway.
"Alipay is responsible for safely passing sensitive information, such as credit card data, through multiple points on the payment processing chain," says Alex Qiu, vice president of Alipay. "Trustwave is providing us with the necessary tools and technology to help us better understand where our processes, procedures and standards might need work."
"By undergoing the PCI DSS compliance validation process - including a penetration test - Alipay is thoroughly evaluating their network security," says Robert J. McCullen, chairman and CEO of Trustwave. "By validating and maintaining their PCI DSS compliance, Alipay is taking the necessary steps to help protect their customer data."
"We've provided Alipay with an effective layered security approach to help ensure we secure their organization and those businesses that rely on them to process their transactions," says Sophia Chen, director of Northern Asia Pacific for Trustwave.
About AliPay
Alipay.com Co., Ltd (AliPay) is China's leading online payment service by both number of users and total transaction volume. A member of the Alibaba Group, it enables individuals and businesses to securely, easily and quickly send and receive payments online. AliPay works like an escrow service, solving the issue of settlement risk in China. Since its launch in 2004, AliPay has become the most popular and extensively used online payment tool for all areas of e-commerce in China, and is fast becoming the industry standard. AliPay's products and services are built on trust. Not only does AliPay guarantee the safety of each online transaction, it helps Internet users create their own trust profile which fosters a safe online payment environment.
About Trustwave
Trustwave is a leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today's challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper® compliance management software and other proprietary security solutions including SIEM , WAF , EV SSL certificates and secure digital certificates . Trustwave has helped hundreds of thousands of organizations-ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers-manage compliance and secure their network infrastructures, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, Asia and Australia. For more information, visit https://www.trustwave.com/en-us/.