Alipay Selects Trustwave for PCI DSS Compliance Validation

CHICAGO, IL and HANGZHOU, CHINA--(Marketwire - July 27, 2009) - Alipay, China's leading online payment gateway, has selected Trustwave to provide Payment Card Industry Data Security Standard (PCI DSS) compliance validation services. Trustwave is the leading provider of on-demand data security and payment card industry compliance management solutions to businesses and organizations throughout the world.

PCI DSS is the payment card industry security requirement for entities that store, process or transmit cardholder data, and has been endorsed by several major card brands -- Visa Inc., MasterCard Worldwide, Discover Network, American Express and JCB.

Alipay has enrolled in Trustwave's on-demand compliance management solution TrustKeeper® to access the necessary automated tools to support on-going compliance such as quarterly network vulnerability scans.

Trustwave will also perform an external penetration test to identify any network vulnerabilities and exploitable security flaws that could serve as an entrance point for a malicious attack. The penetration test will help Alipay determine the necessary steps needed to secure their environment and remediate any threats to help ensure secure transactions for all the customers using their payment gateway.

"Alipay is responsible for safely passing sensitive information, such as credit card data, through multiple points on the payment processing chain," says Alex Qiu, vice president of Alipay. "Trustwave is providing us with the necessary tools and technology to help us better understand where our processes, procedures and standards might need work."

"By undergoing the PCI DSS compliance validation process -- including a penetration test -- Alipay is thoroughly evaluating their network security," says Robert J. McCullen, chairman and CEO of Trustwave. "By validating and maintaining their PCI DSS compliance, Alipay is taking the necessary steps to help protect their customer data."

"We've provided Alipay with an effective layered security approach to help ensure we secure their organization and those businesses that rely on them to process their transactions," says Sophia Chen, director of Northern Asia Pacific for Trustwave.

Contact Information: MEDIA CONTACT: Ray Chen Alipay +86 571 26888888 37290 Michelle Genser Trustwave +1 312 873 7288