+91 9324813180
+1 4847906355
+63 9208320598
+44 1519470017
+84 908370948
+7 9639173485
+62 81808037776
+90 5441016383
+66 993367171
+254 725235855
+256 707194495
+46 700548490SSL Certificate & Encryption
SBI formulated a compliance mandate for vendors to ensure appropriate security best practices and controls deployed on merchant websites that are integrated with their payment gateways. Any payment service provider or vendors that wants to integrate SBI payment service to their business gateway, needs to undergo Vendor security compliance, fulfilling all the withholding requirements. The Vendor Site Compliance Certificate (VSCC) can only be issued by CERT-In Empaneled Organization. Though it is only required for private merchants, government clients and reputed educational institutes need to produce a self-certify Form C.
The key requirement/criteria/segment to be covered as per the Vendor Site Compliance Certificate (VSCC Form C) questionnaire are as follows:
-
-
Application Security
-
Vulnerability Assessment & Penetration Testing
-
Firewall
-
Data Storage & Localization
-
Audit Trail & Logging
-
PCI DSS (if applicable)
-
Data Sharing & Privacy
The VSCC Form C must be filled, signed & certified by a CERT-IN empaneled auditor which can then be submitted to SBI as part of the merchant on-boarding process.
"As a CERT-IN empanelled body, QRC will help you understand, manage and comply with IRDA’s Cyber Security requirements as published in the IRDA’s Guidelines on Insurance E-Commerce on a periodic basis."
