Sendo.vn achieve PCI DSS Level 1 Certification

The e-commerce floor of FPT Sendo.vn was granted PCI DSS Level 1 Certification by Case Control (USA) after meeting 12 strict international standards.

01/10/2014

With this certification, Sendo.vn officially becomes the safest e-commerce site in Vietnam as well as the only to possess the payment gateway with the highest information security certification.

On Sep 26, the ceremony took place at FPT Tan Thuan building, HCMC, with the participation of Chief Operating Officer (COO) of Control Case Suresh Dadlani, Head of SBV's Payment Department Bui Quang Tien and Director of the Department for E-commerce and Information Technology (Ministry of Industry and Trade) Tran Huu Linh. For FPT, Sendo Chairman Nguyen Dac Viet Dung, Sendo CEO Tran Hai Linh, Deputy General Director of Sendo Nguyen Phuong Hoang and security expert Nguyen Minh Duc (FPT Technology Committee).

PCI DSS standards were established by Security Standards Council for payment cards. Its original members were the world’s well-known providers of international payment cards such as Visa, MasterCard, American Express (AMEX), Discover Financial Services and JCB International.

Case Control COO granted the certification to Sendo.vn’s Chairman.

"PCI DSS is a very difficult security standard to secure transactions of Sendo’s customers," said Suresh Dadlani. According to Case Control COO, PCI DSS was developed to assist organizations in protecting customers’ data, against data intrusion and usage.

State Bank’s representative said that payment in Vietnam’s e-commerce was mainly cash on delivery (COD). "This is at risk. But I think it's just a "transitional period" as the online payment is an inevitable trend to ensure interests of all sides. With PCI DSS certification, Sendo.vn showed its serious investment in the field of e- commerce", said Head of SBV's Payment Department Bui Quang Tien.

According to a survey by Ponemon Institute (USA), organizations/entrepreneurs reduced the number of data thefts after applying PCI DSS standards. Approximately 64% of firms applying this standard said that their payment card data were not attacked within past 2 years. Meanwhile, only 38% of businesses not applying PCI DSS said theirs were not attacked.

Sendo Chairman said that PCI DSS certification would help the e-commerce floor of FPT provide customers secured cards. "The online payment brings a new experience to e-commerce. Sendo's customers will have an opportunity to buy goods at competitive prices when choosing a new payment," stated Dung.

Businesses which want to apply PCI DSS standards must meet 12 requirements on information security policy, data processing, computer network structure for systems. "E-commerce floor of FPT possesses a foundation of modern and sustainable technology. Seeing the spirit of professionalism of PCI DSS project team in Sendo, we believe Sendo will meet and maintain strict standards of PCI DSS, which the firm has achieved," said Suresh Dadlani.