or


CyberSource and Trustwave Partner to Secure ePayment Data

Partnership Provides Complete Set of Payment Security Services for Merchants

Reading, UK - August 13, 2008

CyberSource Corporation, a leading provider of electronic payment and risk management solutions, and Trustwave, the leading provider of on-demand data security and payment card industry compliance management solutions to businesses and organisations throughout the world, have announced a partnership to provide payment security solutions to Trustwave and CyberSource merchants in the United States and Europe. Industry-leading payment security technologies and consulting services from both companies will help merchants streamline compliance validation with the Payment Card Industry Data Security Standard (PCI DSS), providing a complete set of payment security services for merchants.

PCI DSS is the payment card industry security requirement for entities that store, process or transmit cardholder data, and has been endorsed by all the major card brands – Visa Inc., MasterCard Worldwide, Discover Network, American Express and JCB. The PCI DSS is a framework for the secure handling of cardholder data.

Recognised as CyberSource’s preferred Qualified Security Assessor (QSA), Trustwave will offer CyberSource merchants a comprehensive compliance validation programme, including its Risk Profiler, an online portal that defines data security risk associated with credit card acceptance practices. Trustwave’s Risk Profiler is the first stage of its TrustKeeper® on-demand compliance management programme. TrustKeeper provides merchants with access to tools necessary to validate PCI DSS compliance including the Self-Assessment Questionnaire and quarterly network vulnerability scanning, and when necessary, remediation recommendations. Additionally, Trustwave will work with CyberSource Global Services to provide merchants application testing and other forensic services. These proprietary security solutions, along with Trustwave’s managed security services, will help merchants facilitate and maintain ongoing PCI DSS compliance validation.

Similarly, Trustwave will offer its merchants CyberSource Secure Storage and Hosted Payment Acceptance solutions to reduce the scope of PCI DSS compliance by removing payment data storage and handling from the merchant environment. Trustwave will also work with CyberSource Global Services to provide security remediation to address gaps in PCI DSS compliance.

“We believe joint marketing of the talents of our two companies will yield the most complete set of payment security services for eCommerce merchants,” said David Glaser, vice president, CyberSource Global Services. “Both companies will be better able to serve the needs of their customers. We are delighted to be partnering with Trustwave, long one of the world’s leaders in payment card security compliance management.”

“This partnership really drives the talent of both organisations into a comprehensive solution that benefits the merchant,” said Robert J. McCullen, chairman and CEO of Trustwave. “It’s our goal to secure the payment environment to limit the opportunity for a data compromise and by teaming with CyberSource, we’re able to provide our merchants a solution to limit data storage and handling.”

About CyberSource
CyberSource is a leading provider of electronic payment and risk management solutions. CyberSource solutions enable electronic payment processing for web, call centre, and point-of-sale environments. CyberSource also offers industry leading risk management solutions for merchants accepting card-not-present transactions. CyberSource Professional Services designs, integrates, and optimises commerce transaction processing systems. Approximately 238,000 businesses use CyberSource solutions, including half the companies comprising the Dow Jones Industrial Average. The company is headquartered in Mountain View, California, and has sales and service offices in Japan, the United Kingdom, and other locations in the United States including Bellevue, Washington and American Fork, Utah. For more information, please visit CyberSource at www.cybersource.co.uk or email uk@cybersource.com.

About Trustwave
Trustwave is the leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today’s challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper® compliance management software and other proprietary security solutions. Trustwave has helped more than 30,000 organizations—ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers—manage compliance and secure their network infrastructure, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, China and Australia. For more information, visit https://www.trustwave.com/.

“Safe Harbor” statement under the Private Securities Litigation Reform Act of 1995
Statements in this release that are not purely historical are forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934, including, without limitation, statements regarding the company's expectations, objectives, anticipations, plans, hopes, beliefs, intentions or strategies regarding the future. Forward-looking statements in this release include, statements regarding: (1) helping merchants streamline Payment Card Industry Data Security Standard (PCI DSS) compliance; and (2) providing the most complete set of payment security services for merchant. Factors that could cause actual results to differ materially from the forward looking statements include risks and uncertainties such as, changes in customer needs, new products and services offerings by the company and its competitors, any unforeseen event or any unforeseen system failures, and other risks indicated in our filings with the Securities and Exchange Commission. It is important to note that actual outcomes could differ materially from those in such forward-looking statements. Readers should also refer to the documents filed by CyberSource with the Securities and Exchange Commission, specifically the annual report filed on Form 10-K for the year ended December 31, 2007, filed with the Securities and Exchange Commission on March 11, 2008, and our quarterly reports filed on Form 10-Q from time to time, all of which identify important risk factors.

©2008 CyberSource Corporation. All rights reserved. CyberSource is a registered trademark in the U.S. and other countries. All other brands and product names are trademarks or registered trademarks of their respective companies.

back to news archive