PCI DSS

PCI DSS

Scope Identification and Reduction

Identifying the scope of your Cardholder Data Environment is a vital part of PCI DSS compliance. Our PCI Qualified Security Assessors (QSA) will help you to correctly scope your environment, and work with you to identify areas for reduction of the scope–saving you money and assessment time.

PCI DSS

Gap Analysis

An experienced PCI DSS expert will conduct an on-site assessment to identify areas of non-compliance with the PCI DSS.

At the end of the assessment, you will receive a report detailing your current strengths, weaknesses and compliance gaps, along with actionable points. This report will provide you with the information you need to minimise the risk of non-compliance with the PCI DSS.

A Gap Analysis is most useful for those completing SAQs who have no formal external assessment and verification such as a RoC. Provides peace of mind that SAQs are being completed correctly.

PCI DSS

QSA-led RoC

If you process a large volume of card transactions you will be required to engage a QSA company to undertake a formal external assessment.

We’re licensed to perform such assessments and will send one of our QSAs to carry out an assessment of your card holder data environment and produce a Report of Compliance (RoC) that you can submit to your acquiring bank.

We’ll review evidence of compliance and provide useful advice along the way. The Attestation of Compliance we produce can be used to provide to others to demonstrate that you are PCI DSS compliant.

PCI DSS

Formal Assessment

Each year, you must complete a formal assessment of your PCI DSS compliancy. The type of assessment that must be completed depends on the merchant or service provider compliance level that your organisation is determined to be, but will either be a Self Assessment Questionnaire, or a Report on Compliance.

Both of these assessment types result in the issuing of an Attestation of Compliance. Data Protection People offer both QSA-led Self Assessment Questionnaires, and QSA-led Reports on Compliance. As a PCI Security Standards Council-authorised QSA Company, we are able to issue formal Attestations of Compliance.

PCI DSS

Why Choose Us?

The QSA delivery team has a thorough technical grounding and can operate effectively within your IT estate and payment platforms. Our team has experience with modern technologies, including complex virtualised environments, and hold industry qualifications such as: PCI Qualified Security Assessor, CESG Certified Professional, Certified Information Systems Auditor, ISO/IEC 27001 Lead Auditor, Certified Information Systems Security Professional, and Cisco Certified Internetwork Expert.