PCI DSS

Training and Workshops

We offer tailored training sessions and workshops that help educate teams across technical delivery, architecture and design, development, project delivery, and executive boards/committees. Our interactive sessions provide relevant and in-depth understanding of PCI DSS, empowering teams to make informed decisions.

Scoping and Gap Assessments

Scoping is the first step in any PCI DSS compliance programme. With a holistic and pragmatic approach, through assessment of an organisation's Payment Channels and Card Data Environment (CDE), our expert team can define scope and identify any gaps in PCI DSS compliance. We provide detailed scope and gap assessment reports, with pragmatic recommendations that allow organisations to make informed decision to effectively remediate and mitigate identified gaps.

SAQ and RoC Pre-Assessment

Preparing for and completing a Self-Assessment Questionnaire (SAQ) or Report on Compliance (RoC) can be complex, time consuming and stressful for any organisation. To help alleviate this we offer guidance and support to ensure your organisation is well informed and prepared. Pre-assessments can include document review, mock interview sessions, guidance on how to collect and present evidence, or more tailored support.

Full Assessments (RoC & AoC)

Full assessments follow a standardised approach set by the PCI Security Standards Council. Scope, requirements and documentation will be validated as per the PCI DSS and outputs delivered in a Report on Compliance (RoC) and Attestation of Compliance (AoC). Full assessments are required by all Level 1 Merchants and Service Providers and can be contractually required for level 2-4 Merchants and Service Providers.

Horizon Scanning and Future Dated Requirements

Staying ahead of future PCI requirements is crucial. We help organisations understand upcoming changes and ensure proactive compliance readiness. Our consultants guide you in adapting your security practices to meet evolving PCI standards.

Consultancy and Secure Architecture

Designing secure network and system architectures is critical for meeting PCI DSS requirements. Our experienced consultants provide guidance on creating architectures that align with PCI DSS, maximising security and minimising risk. This can include, reviewing and vetting vendor and tools and capabilities, programmes for transformation and or migration, and wider security strategy.

Review of Master Service Agreements and Contracts

To ensure PCI obligations are adequately covered, we can work with an organisation's legal team to meticulously review master service agreements, schedules, and 3rd party contracts. Our thorough analysis ensures effective indemnities and appropriate flow-downs are in place, to protect an organisation's interest and meet all PCI DSS requirements.