Instaclustr obtains PCI-DSS certification for its management
REDWOOD CITY, Calif., June 14, 2021 (GLOBE NEWSWIRE) – Instacluster, offering reliability on a large scale thanks to its fully managed platform for open source data technologies, today announced that it has obtained PCI-DSS certification for its Managed Elasticsearch service running on AWS. Managed Elasticsearch is based on the Open the distribution for Elasticsearch, which will be updated soon to Open search. Using the open source distribution ensures that Instaclustr customers always have control and portability of their data, are not subject to vendor lock-in, and are free of license fees. Instaclustr’s Managed Apache Cassandra and Managed Apache Kafka solutions on AWS have also been re-certified.
This PCI-DSS certification for Managed Elasticsearch is added to the existing Instaclustr PCI-DSS and SOC 2 accreditations, which demonstrate the company’s commitment to rigorous data security practices and architecture. Business customers with the most stringent security requirements can use Instaclustr’s advanced open source managed data solutions knowing that their environment is continually aligned with the most rigorous security protocols.
the PCI-DSS (Payment Card Industry Data Security Standard) is the information security standard mandated by the payment card industry and applies to all organizations that store, process and / or transmit cardholder data. PCI-DSS certification requirements dictate that all system components, whether in or accessing the cardholder data environment, must have specific and stringent technical, physical, and operational security controls. Beyond applications directly involving finance and payment card transactions, PCI-DSS controls are increasingly adopted in other industries as a recognized “gold standard” for security practices. .
“We remain proactive in ensuring that the data technologies we offer to corporate clients always meet the highest security standards,” said Ben Slater, Product Manager, Instaclustr. “Elasticsearch, managed by Instaclustr, now joins our Cassandra and Kafka solutions to achieve PCI-DSS certification. Additionally, in addition to meeting PCI-DSS compliance for customers who require it, the new security enhancements we have implemented will result in improved levels of security for all of our managed service customers, regardless of the product or platform they are using.
With the re-certification of Managed Cassandra and Managed Kafka, the following improvements have also been made:
- Private network clusters are now optional.
- Console single sign-on is supported.
- Cardholder data encryption requirements have been revised to now only require Master Account Number (PAN) encryption. This is important for Elasticsearch, as it allows additional flexibility for customers; for example, to search by customer name in Kibana.
Additionally, when looking specifically at Kibana, Instaclustr supports connecting the Kibana instance provided by Instaclustr customers to an Open Identity Connect (OIDC) SSO provider, which provides an enhanced user experience.
Customers requiring full PCI-DSS compliance can enroll when creating an Elasticsearch cluster on the Instaclustr managed platform to enable required security options (for example, password complexity in Instaclustr console ). There are additional customer responsibilities involved in achieving full compliance. For more detailed information, please see Instaclustr support page.
Instaclustr customers with existing clusters who wish to join PCI-DSS compliance should contact [email protected]. For more information or a technical briefing, contact an Instaclustr Customer Success representative or [email protected].
Instacluster delivers reliability at scale through an integrated data platform of open source technologies such as Apache Cassandra, Apache Kafka®, Apache Spark ™, Redis ™ and Elasticsearch ™. Instaclustr enables companies to focus internal development and operational resources on building cutting-edge applications for customers. Instaclustr now manages over 100 million node hours and 7 PB of data in its open source technology suite.
For more information visit Instaclustr.com and follow us @Instaclustr.