PCI Compliance Auditing

PCI Security Standards are technical and operational requirements set by the PCI Security Standards Council (PCI SSC) to protect cardholder data. The Council is responsible for managing the security standards, while compliance with the PCI Security Standards is enforced by the payment card brands. The standards apply to all organizations that store, process or transmit cardholder data – with guidance for software developers and manufacturers of applications and devices used in those transactions. If you are a merchant that accepts payment cards, you are required to be compliant with the PCI Data Security Standard.

The three steps to PCI compliance that we can assist you with are:

• Access: identifying all locations of cardholder data, taking an inventory of your IT assets and business processes for payment card processing and analyzing them for vulnerabilities that could expose cardholder data.
• Repair: fixing identified vulnerabilities, securely removing any unnecessary cardholder data storage, and implementing secure business processes.
• Report: documenting assessment and remediation details, and submitting compliance reports to the acquiring bank and card brands you do business with (or other requesting entity if you’re a service provider).