A secure environment
Network segmentation and service connection rules.
PCI DSS hosting
Payment systems.
A protected foundation.
PCI DSS hosting for applications and services handling payment card data. We select infrastructure and agree responsibility boundaries before launch.
Infrastructure for payment projects
Environment, resources and responsibilitiesAn integrated solution for your project
MST + Syncweb
Systems integration expertise and hosting infrastructure within one group.
Start with architectureSecurity
Security
in the system design.
A payment project comprises infrastructure, applications and processes. We define systems, network connections and participants' tasks.
- Segmentation and connection rules
- Access and security controls
- Support procedures and documentation
Payment project environmentSolution diagram
InfrastructureComputing and networking
→
Your servicesApplications and data
→
ControlAccess and processes
Project scope and security controls depend on your architecture. This is a solution diagram, not certification of a specific system.
A working foundationResources. Control.
Resources. Control.
Specialist involvement.
Select infrastructure and support for the payment service architecture.
Enterprise platform
Enterprise-grade hardware for server workloads.
Scaling up
Configuration can change as applications and databases grow.
Clear responsibilities
Define customer, provider and shared tasks.
Security management
Security controls, access and event monitoring under the selected model.
24/7 support
Interaction procedures, availability parameters and SLA are recorded in service terms.
Two service modelsYour team.
Your team.
Our involvement.
Basic and Advanced differ in provider responsibilities. Select the model that suits your team.
Basic
Control
with your team.
For companies with their own system administration and information security specialists.
- Virtual resources for your project
- OS configuration and core security controls handled by the customer
- Some network tasks are shared
Advanced
More tasks
handled by MST.
For projects needing greater provider involvement in managing a protected environment.
- Firewalls and secure configuration
- Malware protection and access management
- Extended network resource monitoring
Resources and pricing are calculated individually. WAF, VPN, antivirus and support scope are agreed for the selected model.
Task allocationResponsibilities.
Responsibilities.
Clearly defined.
Compare which areas remain with the customer and which are included in the service.
Compare responsibilities across 12 areas− / +
| Area of expertise | Basic | Advanced |
|---|---|---|
| Firewalls | Shared | MST |
| Secure configuration | Customer | MST |
| Secure storage of payment card data | Customer | Customer |
| Payment card data encryption in transit | Customer | Customer |
| Malware protection | Customer | MST |
| Secure system and application development | Customer | Customer |
| Restricting access to payment card data | Customer | MST |
| System component access management | Customer | MST |
| Restricting physical access | MST | MST |
| Monitoring access to network resources and payment card data | Shared | MST |
| Testing security systems and processes | Customer | Customer |
| Information security policy | Customer | Customer |
Detailed obligations for specific systems, security controls and requirements are recorded in project terms and the contract.
How we workFrom requirements
From requirements
to working infrastructure.
We agree the solution scope, resource availability and terms before connection.
-
01
Review the project
Applications, databases, workload and payment data flows.
-
02
Define the environment
Systems, network, access and each party's tasks.
-
03
Agree the terms
Service model, resources, SLA and supporting documents.
-
04
Prepare for launch
Connection, service migration and configuration verification.
For existing infrastructureAlready have an environment?
Already have an environment?
Start with an assessment.
MST provides IT infrastructure audits against PCI DSS requirements. Scope and assessment format are defined for your project.
Existing infrastructure assessment
Review architecture, requirements and required documents. Prepare an audit and follow-up work proposal.
Questions answeredDiscuss the essentials.
Discuss the essentials.
Before launch.
Does cloud hosting automatically make the whole project PCI DSS compliant?+
No. Applications, processes and organisational controls also need assessment. Project boundaries and responsibilities are agreed separately.
How do we choose Basic or Advanced?+
Basic suits companies with their own team. Advanced increases provider involvement in configuration, security controls and access management. Detailed scope is recorded before launch.
Which documents should we discuss before connection?+
Compliance evidence and its scope, service terms, SLA and a responsibility matrix. The document set depends on the project.
What is included in the price?+
Resource configuration and selected support. Audits, additional security controls and work are included as agreed.
Start with your challengeWhat infrastructure
What infrastructure
does your service need?
Describe your systems and your team's needs. We will prepare a configuration and service model.
- Architecture and data handling
- Workload and resource needs
- Administration and security tasks
Solution scope, timelines and terms are agreed for your project.
Loading the contact form…