Streamit Lisa Compact, Руководство пользователя

Страница: 94 / 109

Lisa Compact 94
Please note that bitrates above 384 kbps are not tested. Also: 64000 Hz, 88200 Hz and 96000 Hz
AAC files are played, but with wrong speed
21.8 PCI DSS compliance
The payment card industry has set out a data security standard. Compliance to this standard is required
for all companies that process credit card transactions. This section answers some questions related to
PCI DSS and the Lisa.
Is the Lisa PCI DSS compliant?
PCI DSS compliance is not required of and assessed for individual devices, but for the combined
relevant systems, processes and policies of a company. It is therefore not possible or even meaningful
to say that 'The Lisa is PCI DSS compliant'.
Does the Lisa put the PCI DSS compliance of a network at risk?
Part of the PCI DSS compliance validation is a network security scan: A non-intrusive network scan to
identify vulnerabilities in operating systems, services, and devices that could be used by hackers to
target the company’s private network. The question could be asked whether the Lisa puts the PCI DSS
compliance of a network at risk.
Streamit does not know of network scans performed by an Approved Scanning Vendor (ASV) on
networks where a Lisa device is installed. Nor has Streamit been able to find tools for testing this.
Considering Streamit's large, world-wide customer base and the strict enforcement of PCI regulations, it
should be safe to say with a high degree of certainty that the Lisa does not compromise the PCI DSS
compliance of a network.
The question whether the Lisa puts the PCI DSS compliance of a network at risk, can also be answered
from a technical point of view.
The Lisa is a client network device, initiating all connections with the outside world. The standard
software in the Lisa only contains what is required for the device to perform its functions. There does
not appear to be any possibility for a Lisa running standard software to compromise the security of a
network.
Theoretically it would be possible for the Lisa device to be 'infected', in order to be used for malicious
purposes. However, this would require: