NEWS RELEASE
May 10, 2021
Broadband Security Inc.

BBSec Registered As a PCI Forensic Investigator Company
and a Card Production Security Assessor Company
BroadBand Security Inc., (Headquarters: Tokyo, Japan. President and CEO: Takashi Takizawa,hereafter “BBSec”) announced it has been registered as a PCI Forensic Investigator (“PFI”) company
and a Card Production Security Assessor (“CPSA”) company by PCI Security Standard Council (“PCISSC”), and the group company, Broadband Security Assessment (Thailand) Company Limited(Headquarters: Bangkok, Thailand. President: Arsira Kawaree, hereafter “BBSec Thailand”) has
been registered as CPSA. It is the world first group companies, which have qualified and registeredas CPSA at the same time.
As the servicing markets registered as Asia Pacific, BBSec provides PFI and CPSA services in Japan,
South Korea, and Thailand with cooperation with BBSec Thailand, with language support in English,
Japanese, Korean an Thai. BBSec also plans to provide services under business alliance (announcedin November 2020) 1 with language support in Vietnamese, since Japanese and South Korean
companies develop business actively in Vietnam.
Background as a PFI companyWhile the number of payment card data breaches are increasing in recent years, demands for PFI
companies are growing but the number of PFI companies are still just 22 in worldwide (as of May 6,2021). BBSec has registered as PFI with achievements as,experienced in incident response and digital forensic services2 for years

actively support customers to maintain or gain payment card security as a leading company inJapan, South Korea and Thailandalready registered in various programs as QSAC3, PCI P2PE4 and PCI 3DS5

Singed Memorandum of Cooperation (MoC) among Terilogy Co., Ltd., VNCS GLOBAL
SOLUTION TECHNOLOGY JSC(VNCS-G)and BroadBand Security (BBSec):https://www.bbsec.co.jp/news/pdf/20201104en.pdf
2 Incident response and digital forensic services provides customers advisory and investigation
support, digital forensics for further investigation by law enforcement and/or for legal actions.
3 Qualified Security Assessor Company (“QSAC”) is the company, which have been qualified by thePCI SSC to validate an entity’s adherence to PCI DSS. BBSec is the Japan’s second qualifiedQSAC.
4 PCI Point-to-Point encryption (“PCI P2PE”) is PCI SSC’s standard to define securely encrypted
end to end communication between point of Interaction (POI) device and processors.
5 PCI 3-Domain Secure (“PCI 3DS”) is PCI SSC’s standard to let users authenticate themselveswith the service providers or payment gateways during Card-Not-Present (CNP) transactions.
11

BBSec now provides PFI investigation service to payment card data breaches based on the PFI
Quality Assurance program, and works closely to PCI SSC, international payment card brands andacquirers to help our customers.
Background as a CPSA company
CPSA employees and companies assess to determine whether the card production and provisioning
entities are compliant to PCI Card Production and Provisioning Security Requirements (PHYSICAL
AND LOGICAL). As BBSec has been qualified and registered as a CPSA company, it now can provide
assessment service to card production and provisioning entities based on the security requirements
defined by PCI SSC.
About BBSec’s Payment Card Security Business
BBSec supports customer companies, which aim for certified or compliant to payment card security
standards, with experienced and specialized consultants.

Program
PCI DSSPCI P2PE
PCI 3DSPFICPSAServicing Market and Support Languages
Markets: Europe, North America, APAC
Languages: English, Japanese, Korean, Thai (Vietnamese for the futureplan)
Markets: APAC
Languages: English, Japanese, Korean, Thai
Markets: Europe, North America, APAC
Languages: English, Japanese, Korean, Thai
Markets: APAC
Languages: English, Japanese, Korean
Markets: APAC
Languages: English, Japanese, Korean, Thai
2

BBSec is the first Japanese company selected for the "2020-2022 Global Executive Assessor
Roundtable (GEAR)" of PCI SSC. GEAR is an advisory committee composed of senior executives ofthe PCI SSC assessor companies. As the first Japanese member of GEAR, BBSec is expanding
business with companies all around the world to aim for becoming the No.1 payment card security
providerAbout BroadBand Security Inc.
BroadBand Security, Inc. is a total security service provider that provides IT security assessment,operation, maintenance, and digital forensics. Since its establishment in November 2000, with theconcept of "making Japan's IT network the most robust in the world", we have been providing
security support for IT services to a wide range of companies, from major corporations andtelecommunication companies to IT ventures, by utilizing our high technological capabilities,
extensive experience, and broad information gathering capabilities.
URL：https://www.bbsec.co.jp/
Contact
Cooperate Communication GroupE-mail: press@bbsec.co.jp
Phone: +81-3-5338-7430

3