PCI Certification
Preparing for and achieving PCI DSS, PCI PIN and related certifications — with the cardholder data environment scoped as small as it can honestly be.
ما تحصلون عليه في النهاية
- Scope and data-flow diagrams
- Gap assessment report
- Policies and procedures
- Evidence repository
How the engagement runs
Each phase ends with something you can review before the next one starts.
المرحلة 1: Scoping
Card data flows mapped and the cardholder data environment defined.
You leave with
An agreed scope and network segmentation plan.
المرحلة 2: Gap assessment
Every applicable requirement assessed against current controls.
You leave with
A prioritised remediation plan.
المرحلة 3: Remediation
Controls implemented and evidence collected with your teams.
You leave with
Requirements met and evidenced.
المرحلة 4: Assessment
Support through the QSA assessment and the report on compliance.
You leave with
An assessment ready for sign-off.
What you hold at the end
- Scope and data-flow diagrams
Where card data goes and what is in scope
- Gap assessment report
Each requirement and its status
- Policies and procedures
The documentation PCI DSS requires
- Evidence repository
What the assessor will ask to see, organised
Questions buyers ask
It depends on scope and starting point. The first phase produces a plan you can hold us to.
أخبرنا بما تسعى إلى بنائه
سواء كنت تحدّث منصة مصرفية، أو تطلق منتج مدفوعات، أو تؤمّن بنية تحتية قائمة، سنساعدك على تحديد المسار الصحيح.