Services

• Assistance in defining an architecture that complies with PCI DSS standards
  • Analyzing the technical context of your platform
  • Interviewing key individuals in order to refine our analysis of the context
  • Defining architecture components (network, system, or application) pertinent to PCI DSS
  • Conducting a «Gap Analysis» (or «pre-assessment»)
  • Defining the list of PCI DSS items or tasks to address
  • Proposing a target architecture in compliance with PCI DSS standards


• Establishing a management process consistent with the pre-requirements and obligations linked to PCI DSS standards
  • Formalizing/adapting processes for establishing PCI DSS standard compliance
  • Formalizing/adapting security policies for establishing PCI DSS standard compliance


• Compliance Assistance
  
  • We complete official PCI DSS self-evaluation questionnaires that are adapted to your situation (identifying points that are in compliance and non-compliance, including corrective measures will enable you to obtain certification)
  • Follow-up to official audits by your Qualified Security Assessor (QSA)

• Annual risk analysis
• On-going Intrusion Tests
• Code Audit
• Maintaining your team's skills through training and workshops