Info
About the service
PCI (Payment Card Industry) is a set of security related standards which are mandated by major credit card brands (Visa, Mastercard, American Express, Dinners, JCB and UnionPay International) to any organization that is storing, processing, transmitting credit card numbers or can impact security of credit cards.
The most common standard is PCI DSS (PCI Data Security Standard) that is applicable to merchants or service providers who have access or can impact security of credit card numbers. Other popular standards are PCI PIN Security – applicable to any organization that is processing PIN transactions, PCI P2PE – for Solution or Components providers offering point to point encryption solution, PCI SSF for organizations developing software processing credit card transactions, PCI 3DS for organizations offering 3DS services to merchants or service providers.
As approved Quality Security Assessors we offer all range of assessment services to clients globally.
Explore the benefits
By working with us, you will:
Truly international footprint – our Assessors were engaged with Clients in more than 60 countries globally. We combine global experience with local specifics applicable to given region, client or market segment.
Wide experience – our Assessors completed more than 150+ assessment projects. We have experience working for different markets verticals in multiple business segments – not only financial sector but also healthcare, retail, hospitality, eCommerce.
Assessors not Auditors – we are Assessors not Auditors. We do not “tick boxes” during our engagement but perform assessment evaluating Client’s specifics, business segment or our wide experience.
Technical background of our Assessors – all of our Assessors prior joining us were for at least 5 years responsible for maintenance or management of in-house systems in scope of PCI compliance. We understand your world and find best solutions to your needs.
Not only PCI DSS – opposite to majority of other organizations – but we also combine almost all PCI qualifications and experience from which you can benefit.
Unique customer experience – our assessment is not only compliance activity but truly security assessment where you are provided with feedback, opportunities for improvements, market insights.
Proven system
Our cooperation step by step
Scope and timeline confirmation – initial step for every PCI engagement is scope confirmation. We need to be clear on your expectations and scope of our work. This element also includes other engagement elements agreement – for example timeline expectation.
Assessment – we perform PCI assessment following instructions and requirements as provided by PCI SSC. Our assessment is combination of on site and off site work which includes interviews, observations, documentation review.ng element. Optional element is card brand or PCI SSC submission and registration.
Tracker delivery – after assessment you will be provided with document outlining all required evidence, documentation and any opportunities for improvements.
Evidence collection and review – we provide you link where you can upload your evidence, which we will review and provide feedback
Reporting – we document our observations in ROC / ROV format as required by PCI SSC and then execute comprehensive QA process to ensure that our work meets high PCI SSC standards.
Assessment finalization – at the end of the assessment you will be provided with Report and Attestation of Compliance/Validation. Once you receive passing report, we will also issue marketing certificate which you can include on your website as marketi
For who this service ideal is?
Merchants accepting credit card payments
service providers from financial sector
solution providers offering p2pe solutions
software vendors
Service providers to merchants or financial institutions
