There are a number of different names people use when referring to an onsite assessment they are required to undergo as a part of their Payment Card Industry (PCI) compliance. A Level 1 assessment, a PCI QSA onsite assessment, a ROC assessment. All of these are referring to the same thing: a PCI Onsite Assessment […]
What is the Visa Merchant Servicer Self-Identification Program (MSSIP) and how can I get my company included on the list? This is a great question and today we will explore what this is, the benefits for your company, and how you can get on the list. What is the Visa MSSIP? The Visa MSSIP was […]
In today’s blog, we are going to focus on PCI compliance. If you are being asked to show that you are handling credit card information appropriately and are compliant with the PCI Data Security Standard (DSS), there are two ways this can be done, a Self Assessment Questionnaire (SAQ) or a Report on Compliance (RoC). […]
To cut to the chase, the answer is Yes. Triaxiom Security is a QSA company and has multiple QSA employees on staff. According to the PCI Security Standards Council, “Qualified Security Assessor (QSA) companies are independent security organizations that have been qualified by the PCI Security Standards Council to validate an entity’s adherence to PCI […]
It’s a simple question, but there are a surprising number of organizations that aren’t sure exactly where to find the answer to whether they need to be PCI compliant and how they need to demonstrate their compliance. For organizations curious about their compliance obligations when it comes to the Payment Card Industry (PCI), it can […]
Maintaining PCI Compliance requires you to keep your security program up to date and perform certain activities throughout the year. If you don’t stay on top of it, you could find yourself missing a key component, such as a quarterly ASV Scan, which will result in a failing Report on Compliance (RoC) or Self Assessment […]
A PCI QSA onsite assessment, also known as a Level 1 Assessment, that produces a full Report on Compliance (RoC) is an extremely involved process. In a previous blog, we’ve covered our methodology for completing this type of assessment, potentially explaining some of the level of effort that goes into this type of assessment. Taking […]
If you are a level 1 merchant or service provider, or your acquiring bank views your organization as high risk, you must be compliant with the full Payment Card Industry (PCI) Data Security Standard (DSS). Additionally, in order to validate your compliance, you will be required to have a Qualified Security Assessor (QSA) perform a […]
For such a short question, you may be reading this because you are struggling to find a clear answer. Many organizations may be confused about what their requirements from a PCI perspective are, and with that confusion, may not even know who they need to ask to clear it up. The question of whether you […]
For most organizations that accept credit cards for payment, compliance with PCI DSS is a necessary evil to keep your bank happy and ensure that money keeps coming in the door. And for compliance purposes, your company is likely being required to complete an SAQ, as only a relatively small percentage of large merchants (or […]
