Service Desk and PSI DSS

Products

• CA Service Desk Manager

Issue/Introduction

Service Desk admins may want to know if Service Desk complies with Payment Card Industry Data Security Standard (PCI DSS).  

Environment

CA Service Desk 17.3 And higher

Resolution

Though Service Desk is not officially certified for Payment Card Industry Data Security Standard (PCI DSS) itself, many requirements of PCI DSS are present. For example, unique id for each person, proactively pursue/configure SSL/TLS communication etc.

Keep in mind that Service Desk itself is not a card payment app so there is no point to certify Service Desk for PCI DSS. And some PCI DSS requirements are not possible with Service Desk alone like anti virus, firewall.

Service Desk is very flexible so with proper configuration/customization it can be used for a lot of IT operations. But again, to meet most(if not all) of PCI DSS requirements, system/network teams would need to get involved.