PCI DSS Analysis for Healthcare Organizations Get A Boost With PCI Analytics 1.9

This past December, IBM gave the community an early Christmas present when it announced the release of a new version of the BigFix PCI Compliance tool, V1.9. This new enhancement adds updated PCI DSS policy reporting and analytics support. With this additional support comes more efficient and compelling reporting for businesses to further enforce their security posture. The five key benefits that come with this update will be very helpful to enterprises adhering to PCI DSS requirements, especially healthcare organizations.

What Is the BigFix PCI Compliance Add-On?

The BigFix PCI Compliance Add-on is a product addition to the IBM BigFix suite which provides checklists for PCI compliance. The checklists are based off of the PCI DSS organizational and technical baselines which have been set as minimums for obtaining PCI compliance.

The PCI Compliance Add-On uses the checklists to simplify PCI compliance and monitor across the entire environment. When the add-on checklists are applied to an organization’s BigFix security configuration, any device that BigFix manages will be scrutinized and reported against via a real-time dashboard. This gives organizations an easy way to reduce non-compliant devices and automate compliance remediation actions in real-time, as they are detected. Sounds pretty cool, doesn’t it?

Here’s the Deal…

The big win for implementing the latest version (1.9) of the PCI Compliance Tool (also known as PCI Analytics 1.9) is how reporting is affected. Reporting capabilities in this latest version provide a more in depth analysis of multiple security policies. This includes the ability to generate specific PCI policy requirement reports, as well as being able to see multiple PCI requirement reports in a single dashboard view. With this, seeing into any and all layers of an organization’s PCI compliance status is easy and concise.

For the healthcare industry, this is huge. PCI compliance has been a growing issue in terms of healthcare organizations, as audit attention turns from the financial and retail world onto the healthcare world. The PCI Compliance tool keeps healthcare organizations a step ahead of PCI auditors while further securing their overall environment, keeping them a few steps ahead of wouldbe security attacks.

The Big Five

As stated earlier, the introduction of this new release also brings with it five key benefits for both PCI requirement and milestone monitoring.

  • Enhanced reporting views makes it easier to drill down into sub reports to view the details of checklist compliance results.
  • Those managing compliance can now assess a device’s compliance status in the requirements view against granular requirements for better audit preparations.
  • Managers gain a new capability that allows them to see compliance data for specific endpoints to better determine and execute remediation actions, and if those actions should be automated or manually performed.
  • Anyone with management level permissions will be given the ability to evaluate compliance milestones so actions can be properly prioritized.
  • The new PCI compliance reporting is now separated from other compliance reporting for better granularity and security posture response actions.

These great new capabilities in the V1.9 Compliance Add-On is definitely on track to helping PCI compliant business and healthcare organizations better align their security posture to PCI DSS requirements.

Champion Is Here to Enhance Your PCI Compliance Needs

At Champion we have seen our healthcare partners’ PCI compliance needs continue to grow. We work with businesses on an individual basis to determine how to best leverage the new features in this latest release of the BigFix PCI Compliance Add-on. Our subject matter experts will join your team in a cohesive effort to make PCI compliance one of the easier tasks your organization needs to address. Contact us today to learn how Champion can help your business get ahead in the PCI compliance game.


Utilizing Azure Backup Increases Healthcare Data Security Against Breach Attacks


Preventing Cross Site Scripting and Request Forgery Threats in Your Business’s Social Media Campaigns


Erick Bacallao joined Champion Solutions Group in 2015 after a career of Software Development in Cuba at the National Cancer Care Institute of Cuba, followed by moving to the States with allAware.


Champion acquired allAware and its properties and Erick has utilized his extensive background and expertise in IT and Software Development to rise to VP of Product Development in less than 5 years. During this time, Erick has been involved with key projects that led to the launch of numerous products including CSP Boss, Inscape platform and 365 Productivity Insights.


Erick has a Bachelor of Science in Computer Science from the University of Havana. He won Gold Medals for Programming from the Ministry of Education in Cuba, and he is certainly still a Gold Medalist for Champion!


As President and CEO, Chris is responsible for the development of key strategic alliances and solution portfolio. He leads Champion’s go-to market and execution strategies for integrated offerings in the cloud, in security, and in digital infrastructure, always focusing on improving the customer experience and driving transformative business outcomes.


He also aligns key partner initiatives with company strategy and oversees corporate marketing and messaging to gain mindshare with customers and partners. It’s his vision and innovativeness that have catapulted Champion up the ranks to become a $100M+ organization—and one of the most respected solution providers in the industry.


Over the past two decades, Chris has also focused on mergers and acquisitions, as well as innovative product development. He is the original founder and an active member on the Board of Managed Maintenance, Inc., a SAAS provider and consulting firm that utilizes their award-winning One-View Portal to help the IT Channel and its customers manage their IT Maintenance.


Chris is also the original founder and chief strategist behind one of the original storage cloud providers, Storage Access / BluePoint. During the course of a few short years, he had raised $20M and took that company public on the Toronto Stock Exchange. It has since been acquired by Pomeroy.


In 2012, Chris led the acquisition of MessageOps and continued the product development and worldwide launch of its premier SAAS, 365 Command. Built on Microsoft Azure, 365 Command is currently managing over 1 million seats of Microsoft’s Office 365. After achieving this phenomenal milestone, 365 Command and other MessageOps O365 utilities were sold to Kaseya.


Over the past 35 years, Chris as worked tirelessly to not only advance his own career, but those of his employees. In addition to leading a $100M organization, Chris can also be found sitting with sales teams, cold calling and coaching, and validating why Champion has been listed on Best Places to Work by both South Florida Business Journal and Computerworld.

Ultimately, the success garnered by Champion Solutions Group, its associated companies, and their employees is due in large part to the leadership of its President and CEO. Perhaps the most fitting award Chris has earned is South Florida Business Journal’s 2013 Ultimate CEO Award.