Reduced Scope of Healthcare PCI Environment Saving Compliance Costs

CHALLENGE

• Large Healthcare Provider spent significant money and time on remediating PCI compliance, however still unable to obtain certification
• Many solutions being presented had significant impact on the end user experience and would require long term operational investments
• Disparate business groups and technologies across various payment methods (e.g. – eCommerce, point of sale, call center)
• Smaller compliance/ GRC team to manage compliance efforts

SOLUTION

• Evaluated environment and identified areas where PCI scope could be reduced or removed entirely
• Developed an ROI model showing costs of deploying scope reduction technologies significantly less than traditional remediation approach
• Client obtained certification in one year after attempting for four
• Identified multiple technologies and business process changes to standardize payment collection
• Reduced scope to manageable level for existing team (e.g., didn’t require significant external hiring)

BENEFIT

• Long term cost savings
• PCI certification provided to acquiring banks
• Removed all storage of cardholder data across environment significantly reducing risk and impact of a breach

< Return to Success Stories