Case Study: Carnegie Mellon University strengthens PCI compliance and security posture with SecurityMetrics

Carnegie Mellon University completes a thorough PCI DSS gap analysis with SecurityMetrics

Carnegie Mellon University (CMU), a global research university, faced challenges achieving PCI DSS compliance due to its decentralized environment and a complex homegrown ecommerce system. They needed to accurately define their cardholder data environment scope and correctly interpret the stringent requirements of an SAQ D. To meet this challenge, CMU's PCI DSS Compliance Project Team engaged the services of SecurityMetrics for their expertise.

SecurityMetrics provided a Qualified Security Assessor (QSA) who performed a Gap Analysis and worked closely with the university to interpret requirements and guide remediation efforts. With SecurityMetrics' help, CMU gained confidence in its compliance, correctly implemented the necessary security controls, and found a knowledgeable partner to increase its overall security posture.

Carnegie Mellon University