PCI Compliance Audit and ROC

Your challenge

A PCI Report on Compliance (ROC) is required by organisations with large transaction volume and must be conducted by a Qualified Security Assessor (QSA) who will issue a formal report to the PCI Security Standards Council (PCI SSC) to attest that your organisation is in full compliance.

Our QSA consultants are experienced assessors that can readily understand your business and the payment solutions and technologies you use, which ensures the highest quality of assessment. By completing the audit, you can gain:

• A complete review of your cardholder data environment and the risks that you need to manage.
  
• An accurate assessment of where you stand in relation to the requirements.
  
• Evidence that your controls are in place and working effectively.
  
• Independent recommendations on procedures and solutions that will help you close identified gaps.

Our service offering 

• Validation of scope accuracy
  
• Data flow diagrams
  
• Network diagrams
  
• The processing and flow of cardholder data through systems and processes
  
• Cardholder data storage locations
  
• Third-party or service provider dependencies
  
• Network infrastructure
  
• Required policies and procedures
  
• The maintenance and management of the cardholder data environment (CDE)
  
• Evidence that policies and procedures have been implemented
  
• An overall assessment of the existing ISMS’s applicability to and procedures required for the PCI DSS