Cloudera achieves PCI DSS Level 1 certification, boosts security

Cloudera has announced it has achieved Level 1 compliance with the Payment Card Industry's (PCI) Data Security Standard (DSS) for Service Providers. The certification highlights the company's dedication to cybersecurity and regulatory adherence, specifically aimed at aiding financial institutions in leveraging artificial intelligence (AI) for business value.

According to the latest report from the Office of the Australian Information Commissioner (OAIC), the financial sector is currently the second most breached industry in Australia. The report covering July to December 2023 indicated a significant rise in data breaches. In 2024, this upward trend has continued, with a reported increase of over 300%. In light of these alarming figures, financial institutions focus on partnerships with companies that comply with rigorous frameworks.

"Cloudera's achievement of this certification is a testament to our commitment to our financial sector customers," said Natalia Belaya, Chief Information Security Officer at Cloudera. "We strive to provide and maintain a secure and trusted platform to support our customers with evolving data initiatives and empower them to unlock greater value from AI."

PCI DSS standards are crucial for entities involved in the payment ecosystem, outlining stringent security measures and processes. These include requirements for developers and solution providers to build and securely manage payment devices, software, and other related solutions. The certification serves as proof of Cloudera's capability to quickly adapt to the latest security requirements in a sector where threats are continually evolving.

With the rapid scaling of e-commerce, the volume of data managed by financial institutions has significantly increased, necessitating enhanced data protection measures. The International Monetary Fund's (IMF) 2024 Global Financial Stability Report indicates that the financial sector is the target for one-fifth of all cyber-attacks. This risk is exacerbated by the sector's dependence on third-party IT providers.

AI is playing an increasingly transformative role in the financial sector, with applications ranging from virtual assistants and synthetic data for model training to generating research reports and fraud detection through machine learning. Cloudera's clientele includes eight of the top 10 global banks, utilising AI and Generative AI while navigating the associated risks within a secure environment.

Sanjeev Mohan, an industry analyst, remarked, "The financial services industry is undergoing significant digital transformation, and the ability to work with trusted third-party solution providers is critical to success. Financial institutions can view compliance with rigorous frameworks, like PCI DSS 4.0, as an indicator that the partner they're choosing to work with is one that can securely navigate the complexities of their data and thrive in this AI-powered future."

Cloudera's achievement underscores its role in supporting financial institutions with secure and compliant platforms as they undertake advanced data initiatives. This PCI DSS v4.0 compliance applies to both the company's Platform as a Service (PaaS) and Private Cloud (PVC) offerings—the newest major version of the security framework.