Description
Extensive PCI compliance experience and the ability to translate concepts into business terms sets IT Governance apart from the rest.
As an approved QSA company, IT Governance adheres to a number of rigorous business and technical requirements, as specified by the PCI SCC. We are able to deliver the full PCI QSA audit and Report on Compliance (ROC) at a price that is appropriate to your budget.
The following items will be assessed during the audit:
- Validation of scope accuracy
- Data flow diagrams
- Network diagrams
- The processing and flow of cardholder data through systems and processes
- Cardholder data storage locations
- Third-party or service provider dependencies
- Network infrastructure
- Required policies and procedures
- The maintenance and management of the cardholder data environment (CDE)
- Evidence that policies and procedures have been implemented
- An overall assessment of the existing ISMS to assess its applicability to and procedures required for the PCI DSS
Regardless of your PCI compliance needs, our Qualified Security Assessor services can help you meet your assessment, remediation, validation and maintenance efforts.
Why use IT Governance?
Selecting the best Qualified Security Assessor (QSA) is critical. The right QSA can help identity and address security risks successfully, while meeting your organisation’s specific needs and budget.
Our status as an approved QSA company underpins our range of PCI DSS consultancy services, which include project scoping, gap analysis, remediation support and audits.
- As an approved QSA company, IT Governance meets a number of rigorous business and technical requirements specified by the PCI SSC.
- Our extensive expertise in PCI and ISO 27001 means we can help you cost-effectively integrate your ISMS with other security frameworks.
- Our ability to translate concepts into business terms sets us apart from the rest.
- We deliver a cost-effective route to compliance: no organisation is too big or too small – we can help organisations of any size or budget.
- We offer a comprehensive security solution because of our extensive ISO 27001, PCI, penetration testing and BCM/disaster recovery expertise.
- We can provide you with products and support to ‘do it yourself’, with our PCI documentation toolkits, guides, publications, training and staff awareness courses.
- We possess deep technical knowledge and information security expertise.
- Our independent and unbiased advice means we are not affiliated with software providers, and we leverage your existing technology where possible.
- As a CREST member company, IT Governance has been verified as meeting the rigorous standards mandated by CREST. Clients can rest assured that the work will be carried out to rigorous standards by qualified and knowledgeable individuals.
- We offer fixed-price as well as bespoke penetration testing services, enabling you to easily select the solution appropriate to your needs and budget.
Additional services
If you require additional help, we can offer unbiased advice and remediation solutions to enable you to achieve full compliance to the Standard.
Contact us today for a quote – it pays to be PCI-compliant. Email us on servicecentre@itgovernance.co.uk or call +44 (0) 845 070 1750.
