PCI DSS Consulting Service

PCI DSS is a complex and detailed standard that applies to all organizations that store, process or transmit payment card data, as well as organizations that can affect the security of the credit card processing environment. Our Qualified Security Assessors (QSAs) will guide you through the PCI journey from initial review to full compliance with the standard in the most efficient and least intrusive way possible.

PCI DSS (Payment Card Industry Data Security Standard) includes a set of requirements to help organizations prevent payment data breaches and payment card fraud.

But did you know that requirements for your organization can change when checked regularly? In fact, there are four PCI compliance levels, determined by the number of transactions the organization processes each year. We offer you PCI DSS consulting services at all levels.

Level 1: Merchants who process more than 6 million card transactions per year.

Level 2: Traders who process 1 to 6 million transactions per year.

Level 3: Traders who process 20,000 to 1 million transactions per year.

Level 4: Merchants with less than 20,000 transactions per year.

With PCI DSS, the goal is to ensure card payments have appropriate protection conditions — and the first step to achieving this is to complete an assessment (depending on your specification level), quarterly network scan, and Confirmation of Compliance Form (AoC).

For Tier 1 organizations, the assessment or audit should consist of an external audit performed by a QSA (Qualified Security Auditor). An on-site audit of your organization will be conducted within the scope of the following processes:

Determination and verification of audit scope;

Reviewing documents and technical processes related to PCI DSS processes;

Determining whether PCI DSS requirements are met;

Providing support and guidance in the adaptation process; and

Evaluate compensatory controls.

The auditor will then submit a RoC (Compliance Report) to the organization to demonstrate compliance.

Organizations at PCI Level 2–4 may complete a self-assessment questionnaire (SAQ) rather than an external audit. Level 2 organizations must also complete a RoC.