Case Study: Fairview strengthens PCI compliance with NetSPI

Fairview reduces PCI compliance scope and cuts external scan time with NetSPI

Fairview Health Services, a healthcare organization based in Minnesota, faced the challenge of understanding and achieving compliance with the Payment Card Industry (PCI) Data Security Standard. They needed to identify where cardholder data resided, determine their compliance obligations, and reduce the time and cost involved in the process. They engaged NetSPI for its Penetration Testing (PTaaS) and security consulting services to assist with a gap analysis and completing the required Self-Assessment Questionnaire (SAQ).

NetSPI helped Fairview by conducting interviews and a technical analysis to identify all points of credit card data handling, accurately complete the SAQ, and design a "PCI island" to reduce the scope of compliance. This strategy minimized the security burden on users and streamlined ongoing monitoring. As a result, Fairview significantly reduced the scope of its PCI compliance efforts and now partners with NetSPI for quarterly external scans and co-sourced internal audits to maintain ongoing validation.

Fairview