PCI Certification
Preparing for and achieving PCI DSS, PCI PIN and related certifications — with the cardholder data environment scoped as small as it can honestly be.
What you hold at the end
- Scope and data-flow diagrams
- Gap assessment report
- Policies and procedures
- Evidence repository
How the engagement runs
Each phase ends with something you can review before the next one starts.
Phase 1: Scoping
Card data flows mapped and the cardholder data environment defined.
You leave with
An agreed scope and network segmentation plan.
Phase 2: Gap assessment
Every applicable requirement assessed against current controls.
You leave with
A prioritised remediation plan.
Phase 3: Remediation
Controls implemented and evidence collected with your teams.
You leave with
Requirements met and evidenced.
Phase 4: Assessment
Support through the QSA assessment and the report on compliance.
You leave with
An assessment ready for sign-off.
What you hold at the end
- Scope and data-flow diagrams
Where card data goes and what is in scope
- Gap assessment report
Each requirement and its status
- Policies and procedures
The documentation PCI DSS requires
- Evidence repository
What the assessor will ask to see, organised
Questions buyers ask
It depends on scope and starting point. The first phase produces a plan you can hold us to.
More in Security & Compliance Solutions
Practice overviewTell us what you’re trying to build
Whether you’re modernizing a banking platform, launching a payment product, or securing existing infrastructure, we’ll help define the right path forward.