Skip to Main Content

PCI

Ensure PCI compliance. Any organization that stores, processes, transmits, or supports the security of credit card data may need to comply with PCI DSS.

Comprehensive PCI Services

TrustedSec is a Qualified Security Assessor Company (QSAC) through the PCI SSC. TrustedSec employs many QSAs, some of whom have been in place since the PCI SSC began the program nearly 20 years ago. TrustedSec QSAs will recognize and suggest the best options available, from PCI Readiness Assessment to PCI SAQ Assistance and issuance of a PCI DSS Report on Compliance (ROC).

Scoping and Gap Assessments

As the first steps in ensuring PCI compliance, scoping and gap assessments include having the appropriate people, processes, and technical controls aligned to an organization’s compliance scope. Whether the organization is new to PCI or is already compliant but new to the latest DSS version 4, TrustedSec is able to help.

SAQ Assistance

Depending on transaction levels, merchants and service providers may be able to report compliance with a Self-Assessment Questionnaire (SAQ). Depending on the in-scope payment channels, an organization may be able to test fewer controls than the full SAQ type D and the entire DSS. While completing an SAQ report can help reduce the cost and burden of reporting PCI compliance, all in-scope requirements must be verified as in place. TrustedSec can help reduce the organization's burden in verifying compliance and provide independent attestation that compliant operations are in place.

PCI ROC Assessment

The PCI ROC Assessment is a formal assessment performed by a PCI QSA. It includes on-site interviews with subject-matter experts, review of documentation and evidence, and samples of key systems to ensure that controls are in place. At the end of the engagement, two (2) artifacts will be produced reflecting the compliance status of the payment processing or supporting environment, including a ROC and an Attestation of Compliance (AOC).

PCI ASV Vulnerability Scans

For vulnerability scanning requirements needing an Approved Scanning Vendor (ASV), TrustedSec offers these PCI services. Compliant ASV scan reports identify known vulnerabilities at least every 3 months.

PCI Penetration Testing

PCI Penetration Testing employs blended threat scenarios to test the effectiveness of your cardholder environment as required by the Payment Card Industry Data Security Standard (PCI DSS).

PCI Implementation Guidance

Every organization has unique challenges, is in a different place, and needs to approach solutions at a different pace. By utilizing TrustedSec's resources, a constant measure of guidance can be shared over time.

“Having access to industry leaders right here at TrustedSec makes solving our clients' challenges easier.”
Paul SemsManaging Director of Remediation Services
Webinars March 29 2023

The Value of Compliance: Minimizing the Impact of PCI DSS 4.0

Get practical advice and resources to help your business navigate the road ahead from our expert speaker, Chris Camejo, Compliance Services practice lead and a…

Read about this article
Webinars July 20 2023

PCI Dream Team: PCI 4.0 and New Book Release

Join the incredible PCI Dream Team, featuring the dynamic Art “Coop” Cooper from TrustedSec, the brilliant Ben Rothke from Tapad, the audacious Jeff Hall from…

Read about this article
Webinars August 21 2024

Understanding and Documenting PCI DSS Scope

As new PCI DSS guidance emerges, the expectations placed on auditors and the entities they assess are evolving. New requirement 12.5.2 defines scope…

Read about this article
Blog August 13 2024

Must I TRA?: PCI Targeted Risk Analysis

Use of Targeted Risk Analysis (TRA) is a PCI best practice until March 31, 2025, at which time it becomes required for several controls across many assessment…

Read about this article
Blog August 01 2024

Government Contractor’s Ultimate Guide to CUI

Figure 1: Every government contractor when they hear about CUI Contractors and subcontractors working for the US Federal Government (as well as some other…

Read about this article
Blog July 25 2024

Lapse of Control: Applauding PCI SSC for FAQ 1572

I want to applaud the PCI Security Standards Council (PCI SSC) for FAQ 1572 published in March of 2024 for simply and effectively answering a question asked by…

Read about this article
Blog July 18 2024

What is Your Compliance Kryptonite?

Have you ever felt frustrated about security compliance? Well, you're not alone. We've all got some kind of 'Kryptonite' when it comes to Compliance. I asked…

Read about this article
Blog June 25 2024

Playing Games with PCI Compliance Deadlines

The new version 4.0 of the PCI DSS standard that applies to organizations that handle payment cards is now mandatory as of April 01, 2024. As a QSA, I’ve heard…

Read about this article
Blog April 18 2024

PCI DSS Vulnerability Management: The Most Misunderstood Requirement – Part 3

Related RequirementsThis is part three (3) of a three (3) part series on PCI DSS version 4.0 requirement 6.3.1, for identification and management of…

Read about this article
Blog April 16 2024

PCI DSS Vulnerability Management: The Most Misunderstood Requirement – Part 2

Risk RankingThis is part two (2) of a three (3) part series on PCI DSS version 4.0 requirement 6.3.1, for identification and management of vulnerabilities.…

Read about this article