Services We Offer
Pre-Assessment
Preparing for and completing a Self-Assessment Questionnaire (SAQ) or Report on Compliance (RoC) can be complex, time-consuming, and stressful for any organisation. To help ease this, AMR CyberSecurity offers guidance and support to ensure your organisation is well-informed and prepared. Bespoke pre-assessments can include scope validation, document review, interview sessions, and advice on collecting and presenting evidence, with detailed management summary reports delivered to support any remediation planning as required.
Full Assessments (SAQ & AoC)
A Self-Assessment Questionnaire (SAQ) can be confusing for any organisation, especially for those supporting multiple payment channels. Although organisations can often complete a SAQ themselves, this can lead to misinterpretation and may not be something your organisation has the internal expertise to correctly complete. SAQs are required by all Level 2-4 Merchants and Level 2 Service Providers. The type of SAQ will then be determined by your organisation's payment channels and scope. AMR CyberSecurity can assist your organisation in completing any SAQ type, and our Qualified Security Assessors (QSAs) can explain and complete the SAQ on your behalf with formal sign-off of the Attestation of Compliance (AoC) on achieving compliance.
Full Assessments (RoC & AoC)
Full assessments follow a standardised approach set by the PCI Security Standards Council which are required by all Level 1 Merchants and Service Providers and can be contractually required for Level 2 Merchants and Service Providers. The approach is similar to SAQ's, but typically additional requirements may be in scope and any assessment must be carried out by a PCI QSA. Scope validation, system testing and governance documentation will be validated as per the PCI DSS, and outputs will be delivered in a Report on Compliance (RoC) and supporting signed off AOC.
Security Architecture
Designing secure network and system architectures is critical for meeting PCI DSS requirements. Our experienced consultants provide guidance on creating architectures that align with PCI DSS, maximising security and minimising risk. This can include, reviewing and vetting vendor and tools and capabilities, programmes for transformation and or migration, and wider security strategy.
