Certifications
The importance of Certifications
In an increasingly aggressive market, characterised by fierce competition and constant technological innovation, SIA has always placed quality, security, business continuity matters and continual improvement at the heart of its strategy.
Quality Certification
Quality Certification
Compliance with this standard is verified by the attainment of ISO 9001:2008 certification for the conception, design, realization, marketing and supply of:
- Card processing services on domestic and international circuits
- Electronic payment systems and services
- IT products and services supporting operations on banking, credit and financial markets, also at institutional level
- Network services and technology platform services for financial activities on electronic markets.
In addition, within the
Group's governance
framework, SIA has an ISO 9001:2000 Corporate certification which currently includes SIA, RA Computer, SiNSYS and SIA Central Europe.
Security Certification
Security Certification
This relates to compliance with the security standard ISO/IEC 27001:2005.
This standard entails the implementation and maintenance of an Information Security Management System to define, create and control those processes that aim to guarantee the objectives of confidentiality, integrity, availability and conformity of corporate information.
- Security of Infrastructures and Technology
- Security of Applications
- Logical Security
- Physical Security
- Operational Continuity
- Organizational Security
- Security of Contracts
- Security Compliance
Business Continuity Certification
SIA, one of the first in Italy, in November 2008 obtained the BS25999 Certification for Business Continuity Management Systems.
SIA considers the Business Continuity a key element in the delivery of its services consistent with the customer agreements and the Bank of Italy Guidelines and, in general, with the relevant methodologies, best practices and international standards. Hence, the decision of SIA to adopt, as a model for the implementation of its Business Continuity Management System, the BS25999 standard, recognized as a valuable reference at international level.
SIA considers the Business Continuity a key element in the delivery of its services consistent with the customer agreements and the Bank of Italy Guidelines and, in general, with the relevant methodologies, best practices and international standards. Hence, the decision of SIA to adopt, as a model for the implementation of its Business Continuity Management System, the BS25999 standard, recognized as a valuable reference at international level.
Payment Card Industry (PCI) Data Security Standard
The PCI DSS, a set of comprehensive requirements for enhancing payment account data security, was developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa Inc. Inc. International, to help facilitate the broad adoption of consistent data security measures on a global basis.
The PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.
The PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.
The PCI Security Standards Council will enhance the PCI DSS as needed to ensure that the standard includes any new or modified requirements necessary to mitigate emerging payment security risks, while continuing to foster wide-scale adoption.
Read all at: https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml
- Downloads
ISO 9001:2008 Certificate (363 KB)