Yorkshire Building Society Group (YBSG), the UK’s second largest building society, is using data protection product to secure customer information and aid compliance with the new Payment Card Industry Data Security Standard (PCI DSS).
To meet and maintain PCI compliance, financial institutions need to securely control access to their payment card data by only allowing authorised colleagues and technology to process and work with the information. Under the terms of a five-year agreement, YBSG will use Unisys Stealth to micro-segment its network to create secure communities of interest (COIs), consisting of YBSG colleagues and systems that have been authorised to handle customer data. This protects data transferred across its network from being accessed by unauthorised staff, or people outside the building society. As that limits the scope of PCI audits, that provides further cost savings.
Stephen Mulley, Head of IT and Change at YBSG, said: “Our key priority is to keep customer information secure, across the organisation. Unisys Stealth adds layers of protection, to the other multiple layers of protection we employ, to help protect our most sensitive data and achieve and maintain PCI DSS compliance.”
And Tom Patterson, chief trust officer for Unisys, said: “Many older security solutions used by banks and building societies are becoming impractical and expensive to maintain in today’s connected environments. Unisys Stealth is software-based and identity-managed, meaning it’s easy for financial institutions to configure and protect their most sensitive data and achieve PCI DSS compliance efficiently. Additionally, its identity-driven segmentation capabilities work as well in clouds and on mobile, allowing enterprises to overcome issues attached to firewall sprawl that many financial organisations are experiencing.”
