PCI DSS v4.0.1 compliance support.
We help merchants and service providers scope their cardholder data environment, close gaps against PCI DSS v4.0.1 and prepare for the SAQ or QSA assessment.
Protect cardholder data, with a smaller scope.
PCI DSS applies to any organisation that stores, processes or transmits cardholder data, and customers and acquiring banks expect to see that card data is protected.
The Payment Card Industry Data Security Standard (PCI DSS) is maintained by the PCI Security Standards Council. Version 4.0.1 has 12 principal requirements, and compliance is validated through a Self-Assessment Questionnaire (SAQ) or a Report on Compliance (ROC) by a Qualified Security Assessor (QSA), depending on your level.
Why PCI DSS matters
- Smaller scope Segmentation and tokenisation can reduce how much of your environment is in scope.
- Customer confidence Shows customers and acquiring banks that card data is protected.
- Clear requirements The 12 requirements give a concrete, testable baseline.
- Fraud risk reduction Controls designed to protect cardholder data from theft and misuse.
Six steps from scoping to assessment
-
Step 1: Scope reduction
Map the cardholder data environment and reduce it with segmentation and tokenisation.
-
Step 2: Gap assessment
Check your environment against the 12 requirements and list technical and process gaps.
-
Step 3: Control hardening
Implement encryption, access control, logging and secure configuration.
-
Step 4: ASV scanning
Coordinate quarterly external scans by an Approved Scanning Vendor and fix findings.
-
Step 5: SAQ or ROC preparation
Collect evidence and prepare the Self-Assessment Questionnaire or Report on Compliance.
-
Step 6: Assessment support
Support the QSA fieldwork through to the Attestation of Compliance.
Trusted by
- Kavayah Cloud LLC.
- VirtueServe R&D Pvt. Ltd.
- Middleware Lab Inc.
- York IE Inc.
- Davinci Inc.
- Therapz Inc.
- Clouds Analytics Inc.
- RedKite Network LLP
- Yuva Infocare Pvt. Ltd.
- Fidelity Life Science
- Safebooks Global Pvt. Ltd.
- Xenett
- Cyfonix Pvt. Ltd.
- Interstride
- Symbion Coding Inc.