A PCI QSA onsite assessment, also known as a Level 1 Assessment, that produces a full Report on Compliance (RoC) is an extremely involved process. In a previous blog, we’ve covered our methodology for completing this type of assessment, potentially explaining some of the level of effort that goes into this type of assessment. Taking […]
In this blog, we’ll outline our methodology for conducting PCI QSA Onsite Assessments, also known as a Level 1 Assessment or PCI ROC Assessment. A PCI QSA onsite assessment verifies and validates an organization’s compliance with the Payment Card Industry (PCI) Data Security Standard (DSS). This assessment produces a full Report on Compliance (RoC) and […]
If you are required to have a QSA On-Site Assessment annually as a part of your PCI DSS compliance, you are likely already familiar with the fact that meeting PCI requirements is a complex process, and no easy feat. To prepare you, we want to help you understand what to expect before, during, and after […]
If you are a level 1 merchant or service provider, or your acquiring bank views your organization as high risk, you must be compliant with the full Payment Card Industry (PCI) Data Security Standard (DSS). Additionally, in order to validate your compliance, you will be required to have a Qualified Security Assessor (QSA) perform a […]
Your company is required to have a full Payment Card Industry (PCI) Qualified Security Assessor (QSA) Onsite Assessment that will produce a Report on Compliance (RoC) for you to provide to your acquirer. Maybe you’re a Level 1 merchant, maybe you’ve been classified as a high risk merchant due to transaction size, maybe you’ve had […]
For such a short question, you may be reading this because you are struggling to find a clear answer. Many organizations may be confused about what their requirements from a PCI perspective are, and with that confusion, may not even know who they need to ask to clear it up. The question of whether you […]
For most organizations that accept credit cards for payment, compliance with PCI DSS is a necessary evil to keep your bank happy and ensure that money keeps coming in the door. And for compliance purposes, your company is likely being required to complete an SAQ, as only a relatively small percentage of large merchants (or […]
This is the final installment in our series reviewing each of the Self-Assessment Questionnaires (SAQs) available for organizations required to comply with the PCI DSS. This final blog is going to cover another sub-type of the SAQ D, the SAQ D – Service Provider. This SAQ is unique in that, if you’re a service provider, […]
This is the last merchant self-assessment questionnaire to cover in our series going through the organizational requirements to use each of the SAQs. We’ve talked a lot about why it’s so important to try and reduce scope and use the right SAQ for the payment channels utilized by your organization. The SAQ P2PE, in particular, […]
After discussing a number of the other Self Assessment Questionnaires (SAQs) that merchant organizations may need to complete for PCI DSS compliance, we have finally reached the peak if you’re a merchant. This final SAQ for merchants (we’ll cover D for service providers soon) is the catch-all that applies to any organization that isn’t able […]
