Managed PCI Solution

Managed PCI Solution

Managed PCI

Our Managed PCI Solution ensures compliance with the Payment Card Industry Data Security Standard, PCI DSS.

Accredited by the PCI Security Standards Council, we run tests and carry out audits that help protect data and prevent fraud.

Our wide range of services also includes staff training on payment card security risks and an online portal for checking PCI Self-Assessment Questionnaires.

5 – Recover

Develop and implement the appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity event.

Products

Cybersecurity Awareness Training

Popcorn

Popcorn

Features

  • Award-winning Popcorn content is guaranteed to amuse, engage and be remembered
  • Single-sign-on with Microsoft Azure means no more forgotten passwords
  • Cloud platform works on any device, and any network. No infrastructure required
  • Course content and scope can be customised per user or department

Description

A picture is worth a thousand words and we believe a good story is worth a thousand training sessions. We create stories that apply key learning points to the working environment; they explain potential threats, as well as how and why policies need to be complied with and what the expected behaviour should be. Key messages in our stories are based on industry best practice and include elements of security frameworks such as ISO 27001, industry standards such as PCI DSS (Payment Card Industry Data Security Standard) and regulations such as Privacy laws (PPI).

Specifications

Cloud requires no real infrastructure other than connectivity and no vimeo blocking on devices accessing the site

Links

Secure coding – Course Catalogue Something Phishy – Course Catalogue  Compliance Training – Course Catalogue

Download as PDF

Multi Factor Authentication

SMS PASSCODE offers flexible policy-driven administration and protects multiple systems on a global scale. The solution seamlessly integrates to both remote access systems and cloud applications.

CensorNet

CensorNet

Features

  • More Factors Working to Your Advantage
  • Real-Time and Session-Specific
  • Advanced Attack Protection
  • High Passcode Security
  • Unmatched Reliability
  • Status Feedback
  • Flash SMS
  • MemoPasscodesTM
  • Location Aware Message Dispatching

Description

SMS PASSCODE is easy to install, deploy and manage. The platform offers  flexible policy-driven administration and protects multiple systems on a global scale. The solution seamlessly integrates to both remote access systems and cloud applications. The SMS PASSCODE platform allows you to get up and running in less than an hour. Run plug-and-play installation of the SMS PASSCODE software, setup the preferred dispatch mechanism(s), and the system is ready for use. Rollout involves no software deployment on user devices and practical training of the user group is not needed. SMS PASSCODE comes with one-click integration to Active Directory and LDAP Directories. No schema changes or extensions are required.

Specification

RADIUS VPN/SSL VPN Clients Check Point
 Cisco ASA 
Netscaler Gateway & Citrix Access Gateway (CAG)
 Juniper
 Microsoft Forefront (UAG)/Direct Access
Barracuda SSL VPN and NG rewalls
 VMware Horizon View
 Microsoft SharePoint Portal Server 1
Any other RADIUS client supporting challenge/response Palo Alto
F5 BIG-IP
NCP VPN Microsoft TMG Server & Websites

Support for Microsoft TMG published websites:

  • Outlook Web Access 2003 / 2007 / 2010 / 2013
  • Remote Desktop Web Access 
(Windows Server 2008 R2 / 2012 R2)
  • Microsoft SharePoint Portal Server
  • IIS websites using Basic or Integrated Windows 
Authentication
  • Any website not requiring Authentication Delegation 
Citrix Web Interface
  • Microsoft AD FS Protection
  • AD FS 2.0 plug-in for multi-factor authentication
  • AD FS 3.0 multi-factor authentication adapter

Transparent support for multi-factor authentication when:

  • Accessing Cloud Applications such as Saleforce.com, Microsoft Of ce 365, Google Apps etc. (AD FS 2.0/3.0)
  • Accessing websites published through the Microsoft Web
  • Application Proxy (AD FS 3.0), such as SharePoint and Outlook Web Access
  • Approving devices during workplace joins (AD FS 3.0)
  • Internet Information Services (IIS) Websites

Support for the following types of websites:

  • Outlook Web Access 2007 / 2010 / 2013
  • Remote Desktop Web Access
  • Windows Server 2008 R2 / 2012 R2)
Websites using Basic / Integrated Windows Authentication
  • Windows Logon, Remote Desktop Services

Support for the following Servers and Services:

  • Remote Desktop Services (RDP Connections)
  • Windows Servers 2008 R2 / 2012 / 2012 R2
  • Windows 7, Windows 8, Windows 8.1 and Windows 10
  • VMware Virtual Desktop Portal & Client Access

Links

Evaluation Checklist  
Beginners Guide   

Download as PDF

Services

PCI DSS SAQ

Cognosec offers professional guidance to small-to-medium sized businesses in achieving PCI compliance and completing the Self-Assessment Questionnaire.

Cognosec Services

Cognosec Services

Features

The Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations that store, process and/or transmit cardholder data. The framework covers technical and operational system elements connected to cardholder data. If you store, process or transmit credit card data you are subject to this standard. Cognosec is a Qualified Security Assessor (QSA) and as a QSA we are authorised to help your company obtain and maintain PCI DSS compliance. Cognosec GmbH can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer –creating a rounded and comprehensive compliance package. Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors. As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

All business that store, process or transmit payment cardholder data must be PCI Compliant. As a Qualified Security Assessor (QSA), Cognosec offers professional guidance to small-to-medium sized businesses in achieving compliance and completing the Self-Assessment Questionnaire. The PCI DSS self-assessment questionnaires (SAQs) are validation for merchants and service providers self-evaluating their compliance with PCI DSS.  Organizations can either undergo their own PCI DSS assessments, or  a QSA company can conduct PCI DSS assessment and underwrite their SAQs.

Specification

There are different versions of the SAQ to meet different merchant environments. As a Qualified Security Assessor (QSA) we are able to provide PCI DSS SAQ assessment to organizations seek professional guidance in achieving compliance and completing the following Self-Assessment Questionnaires. SAQ A is intended for merchants that accept only card-not-present transactions (that is, e-commerce, mail order or telephone order), and that outsource all their cardholder data functions to PCI DSS compliant service providers. SAQ A would never apply to face-to-face merchants. SAQ B is for those merchants who process cardholder data using only imprint machines or using only dial-out terminals. SAQ C-VT is for merchants using only web-based virtual payment terminals, where cardholder data is manually entered into a secure website from a single system. SAQ C is for merchants with dedicated payment application systems segmented from all other systems, and connected to the Internet for the purposes of transaction processing. SAQ P2PE-HW is for merchants using a validated P2PE solution that is listed on the PCI SSC website. SAQ D is for all other SAQ-eligible merchants that do not fall into any of the other SAQ categories, and for any service providers defined by a payment brand as eligible to complete the SAQ.

Download as PDF

PCI Security Awareness Programme 

The Cognosec Security Awareness Program is designed to help you raise the level of understanding of how important security is today, and to help you push responsibility throughout the company.

Cognosec Services

Cognosec Services

Features

Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.

Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package.

We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

It is imperative that any individual capable of accessing information technology resources understands the value of the information resources and their responsibility of keeping those resources safe from abuse. To address PCI DSS requirements 12.5 and 12.6, which refer to the distribution of security polices throughout the company and the existence of a formal security program, Cognosec offers full support in the development of security policies and security awareness programs.

The Cognosec Security Awareness Program is designed to help you raise the level of understanding of how important security is today, and to help you push responsibility throughout the company.

Specification

The Cognosec 360 Security Awareness Program is designed to help you raise the level of understanding of how important security is today and help you push responsibility throughout your organisation. Our highly international staff have decades of experience in IT Security, having worked directly with the major card brands, acquirers as well as merchants and payment service providers. The Cognosec Team fully understands the kind of risk and pressure our clients go through to reach their IT security, compliance and governance objectives.Cognosec’s 2-Day workshop, delivered by a QSA, has three components:

  1. A management training session for senior managers, HR executives and CxOs.
  2. An end-user security awareness training session – including a test of the material.
  3. A session analysing the company polices and ad- dressing any gaps. On completion of the workshop, Cognosec will help you build a sustainable security awareness program into the company.
Download as PDF

PCI Remediation

We provide individual services for implementing missing elements of an organisation’s security policies to match those of the PCI DSS. Variances between the PCI DSS Standard and an organisation’s currently established policies and practices detected in the gap assessment need to be addressed.

Cognosec Services

Cognosec Services

Features

The Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations that store, process and/or transmit cardholder data. The framework covers technical and operational system elements connected to cardholder data. If you store, process or transmit credit card data you are subject to this standard. Cognosec is a Qualified Security Assessor (QSA) and as a QSA we are authorised to help your company obtain and maintain PCI DSS compliance. Cognosec GmbH can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer –creating a rounded and comprehensive compliance package. Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors. As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

PCI Remediation is a follow on from a PCI DSS Gap Assessment and involves remediating those requirements of PCI DSS in which you are not compliant. We provide individual services for implementing missing elements of an organisation’s security policies to match those of the PCI DSS. Variances between the PCI DSS Standard and an organisation’s currently established policies and practices detected in the gap assessment need to be addressed. PCI DSS compliance is achieved when solutions and sound policies are implemented that fully address and satisfy PCI DSS. Variances between the PCI DSS and an organisation’s currently established policies and practices detected in the gap assessment need to be addressed. Any entity that accepts payment card transactions must be compliant with all 12 elements of the PCI Data Security Standard. Cognosec provides individual services for implementing missing elements of an organisation’s security policies to match that of the PCI DSS.

Specification

All organisations that store, process and/or transmit cardholder data must be compliant with PCI DSS 12 requirements.  PCI Remediation is basically identifying and fixing the “not in place” items to be remediated of PCI DSS. If items are discovered to be not in place in the organization, the QSA provides as much detail as needed to explain the remediation actions and the timeline for compliance and the organization perform the remediation activities. PCI Remediation is basically identifying and fixing the 12 elements of PCI DSS in which you are not compliant. Cognosec provides individual services for implementing missing elements of an organisation’s security policies to match that of the PCI DSS. Variances between the PCI DSS and an organisation’s currently established policies and practices detected in the gap assessment need to be addressed. Remediation recovery is achieved when solutions and sound policies are implemented that fully address and satisfy the compliance requirements. AS a QSA company, we provide both workshops and individual services for implementing missing elements of an organisation’s security policies to match that of the PCI DSS. – Cognosec offers workshops to dive deep into the data security standard – allowing you to select the right technologies and architecture to attain and maintain the PCI DSS. – Cognosec helps you complete the gaps in your documentation and review the policies, procedures, and processes of your business. – As an ASV, Cognosec is able to perform external vulnerability scans in accordance with PCI DSS requirement 11.2. These scans provide a consistent outlook over an organisation’s security posture – identifying the potential threats to their IT system. – Cognosec offers Penetration Testing of a PCI DSS Scoped Environment and Internal Penetration Testing of a PCI DSS Scoped Environment – Cardholder Data Discovery

Download as PDF

PCI GAP Assessment

Cognosec’s PCI Gap Assessment is available for both remote and onsite activities. To create the most accurate assessment possible, it also includes interviewing system architects, systems administrators, testing personnel, and support staff.

Cognosec Services

Cognosec Services

Features

The Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations that store, process and/or transmit cardholder data. The framework covers technical and operational system elements connected to cardholder data. If you store, process or transmit credit card data you are subject to this standard. Cognosec is a Qualified Security Assessor (QSA) and as a QSA we are authorised to help your company obtain and maintain PCI DSS compliance. Cognosec GmbH can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer –creating a rounded and comprehensive compliance package. Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors. As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

A PCI DSS Gap Assessment is an analysis on the differences between  an entity’s present security standards and policies and the twelve requirements of PCI DSS. The variances, or “gaps”, are then determined and can be corrected with PCI Remediation. If you have been asked to comply with the PCI DSS by a card brand, an issuing or acquiring bank, a business partner, or a customer who requires it as part of a due diligence exercise, Cognosec can help you. Cognosec’s PCI Gap Assessment is available for both remote and onsite activities. To create the most accurate assessment possible, it also includes interviewing system architects, systems administrators, testing personnel, and support staff.

Specification

Most companies have established security standards and procedures in place, but as the world is conforming on one standard, a reassessment is necessary. A PCI DSS Gap Assessment is an analysis on the differences between established security standards and those demanded by the PCI SSC. The variances, or “gaps”, are then determined and corrected. Our process includes interviewing system architects, systems administrators, testing personnel, support staff and others to gather the most information possible – aiding the subsequent analysis and generation of the final PCI DSS Gap Analysis report. Many companies already have security standards and procedures in place, but as the world is conforming to one standard, a re-assessment is often necessary. A PCI Gap Assessment is an analysis on the variances between established security standards and those required by the PCI SSC for PCI certification.

Download as PDF

PCI ASV Security Scan 

We are a Certified Approved Scanning Vendor ASV and provide vulnerability scanning services in accordance with PCI DSS.

Cognosec Services

Cognosec Services

Features

Security vulnerabilities of Internet facing systems can potentially have severe, wide-reaching implications for your organisation. Cognosec’s certified ASV Scans will identify weaknesses and vulnerabilities as well as quantify their severity – allowing them to be managed efficiently and effectively. Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors. As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Description

An Approved Scanning Vendor (ASV) is an organization with a set of security services and tools to validate adherence to the external scanning requirement of PCI DSS Requirement 11.2.2. We are a Certified ASV and provide vulnerability scanning services in accordance with PCI DSS. Vulnerability scan results provide valuable information that supports efficient patch management and other security measures that improve protection against Internet attacks. Any organisation who wants to maintain their PCI compliance, who wants to know what their weaknesses and vulnerabilities are, and who wants to prevent financial and reputational loss has to conduct ASV scans.

Specification

Cognosec’s Approved Scanning Vendor scans identifies weaknesses and vulnerabilities as well as quantifies their severity – allowing them to be managed efficiently and effectively. This means that an organisation:

  • Fulfils the PCI DSS Requirement 11.2 for quarterly vulnerability scans performed by an ASV.
  • Provides proof of due diligence to regulators, customers and shareholders.
  • Prevents financial loss through fraud or unreliable infrastructure.
  • Protects your brand against the loss of reputation.

Cognosec performs regularly scheduled scans (monthly or quarterly), as well as ad hoc scans – producing and delivering an ASV Report containing every discovery and an evaluation thereof. Security matters covered range from authentication, authorisation and misconfiguration issues to information disclosure and obsolete software version concerns.

What is included in a scan?

Cognosec’s Scanning Solutions test and report on:

  • Firewalls & Routers
  • Operating Systems
  • Database Servers
  • Web Servers
  • Application Servers
  • Common Web Scripts
  • Built-in Accounts
  • DNS Servers
  • Mail Servers
  • Web & Other Applications
  • Common Services
  • Wireless Access Points
  • Backdoors
  • SSL/TLS
  • Remote Access
  • Point-of-sale (POS) Software
Download as PDF

PCI QSA Onsite Assessment

Cognosec’s PCI On-site Assessment is a systematic evaluation of an organisations level of compliance to the Payment Card Industry Data Security Standard (PCI DSS), which needs to be performed during the securitisation process and at regular intervals.

Cognosec Services

Cognosec Services

Features

The Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations that store, process and/or transmit cardholder data. The framework covers technical and operational system elements connected to cardholder data. If you store, process or transmit credit card data you are subject to this standard.

Cognosec is a Qualified Security Assessor (QSA) and as a QSA we are authorised to help your company obtain and maintain PCI DSS compliance. Cognosec GmbH can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer –creating a rounded and comprehensive compliance package.

Cognosec is an Approved Scanning Vendor (ASV) – an organisation with a set of security services and tools available to validate adherence to the external scanning condition of the PCI DSS requirement 11.2. The scanning vendor’s ASV scan solution is always tested and approved by the PCI SSC before an ASV is added to the list of approved scanning vendors.

As Cognosec is a Qualified Security Assessor (QSA) for the PCI-DSS and PA-DSS as well as an Approved Scanning Vendor (ASV)– making Cognosec a one-stop-shop for your PCI compliance needs.  Cognosec can provide you with a full PCI DSS audit portfolio on top of the consultancy service we already offer – creating a rounded and comprehensive compliance package. We are authorised to help your company obtain and maintain PCI DSS compliance.

Cognosec’s PCI On-site Assessment is a systematic evaluation of an organisations level of compliance to the Payment Card Industry Data Security Standard (PCI DSS), which needs to be performed during the securitisation process and at regular intervals. As a Qualified Security Assessor (QSA) we are able to perform an evaluation which covers all twelve requirements of the PCI DSS standard.  A multitude of facets including: technical sampling of in-scope systems, staff interviews and a final policy review – are included, confirming that suitable measures have been taken and that appropriate policies have been put into place. Upon completion of the PCI On-site Assessment, a Report on Compliance (ROC) will be drafted in a format that is acceptable for submission to relevant card brands.

Specification

“As a Qualified Security Assessor (QSA), Cognosec offers the highest quality and smoothest assessment possible. The evaluation will cover a multitude of facets including: technical sampling of in-scope systems, staff interviews and a final policy review – confirming that the suitable measures have been taken and that appropriate policies have been put into place. Upon completion of the PCI On-site Assessment, a Report on Compliance (ROC) will be drafted and will be ready to be submitted to relevant card brands.

There are 5 PCI DSS phases to the Cognosec PCI methodology. Four of them are audit processes and one of them is a half yearly customer review.

  1. Initial Gap Analysis and Onsite Audit
  2. Evaluation of gathered Evidence and Remediation
  3. Report and Review
  4. Project closeout
  5. Half Yearly Review

– For PCI Level 1 Service Providers, to maintain PCI compliance, a PCI On-site Assessment needs to take place absolutely no later than four months (six months is recommended) before the expiration of a PCI certificate, as specified by the card brand listings.

– For PCI Level 1 Merchants, to maintain PCI compliance, a PCI On-site Assessment needs to take place at least four months before the initial PCI compliance date mandated by an acquirer, or four months before the initial re-certification.

Client related activities related to Payment Card Industry Data Security Standard (PCI DSS) are

  1. Validate the scope of the assessment
  2. Contract Drafted & Signed
  3. Onsite Audit Preparation Phase

– Scheduling Phase

– Client Hub Created in Secured OwnCloud

– Client Data Upload to Secured Owncloud

– Policies and Procedures Excel File completed

  1. Conduct PCI Data Security Standard assessments

– Verify all technical information given by merchant or service provider

– Be onsite for the duration of any relevant assessment procedure

– Review the work product that supports the assessment procedures

– Adhere to the PCI DSS Requirements and Security Assessment Procedures

– Select representative samples of business facilities and system components where sampling is employed

–  Evaluate compensating controls (if any)

  1. Produce the final Report on Compliance
  2. Produce the Compliance Certificate
  3. Submit Validation Documents to Card Brands
  4. Client Feedbacks & Testimonials

 

Download as PDF

Vulnerability Assessment

Cognosec performs regularly scheduled scans (monthly or quarterly), as well as ad hoc scans when needed, that concludes with a final ASV Report containing every threat discovery and an evaluation thereof.

Cognosec Services

Cognosec Services

Features

Vulnerability assessment should be a continuous process for every organisation exposed to the Internet. We offer vulnerability scanning as a subscription service on a monthly (recommended) or a quarterly basis. (Since it’s a semi-automated process, it requires minimum effort from the customer.)

Description

A vulnerability assessment identifies, quantifies and prioritises (or ranks) the vulnerabilities in a system, using both system and application vulnerability scans. System vulnerabilities normally exist because of exploitable programming errors in either the operating system or the hardware, and vendors normally release patches when these errors are made public. Patching hundreds or thousands of systems is a tedious business, though, and can sometimes disable functioning applications. Consequently, it is often resisted by IT departments. Vulnerability scans are semi-automated processes that can check whether patches or updates have been installed, bugs removed and systems securely configured. They report everything found. Our auditors then carefully review the results to sift out false positive and check whether a vulnerability exists – and whether action needs to be taken.

Specification

Cognosec performs regularly scheduled scans (monthly or quarterly), as well as ad hoc scans when needed, that concludes with a final ASV Report containing every threat discovery and an evaluation thereof. Cognosec’s scanning solutions test and report on all of the following systems:

  • Firewalls & Routers
  • Operating Systems
  • Database Servers
  • Web Servers
  • Application Servers
  • Common Web Scripts
  • Built-in Accounts
  • DNS Servers
  • Mail Servers
  • Web & Other Applications
  • Common Services
  • Wireless Access Points
  • Backdoors
  • SSL/TLS
  • Remote Access
  • Point-of-sale (POS) Software
Download as PDF

Cognosec SAQ Portal

We’ve developed an online portal that make compliance and acquirer-merchant communication easier.

Cognosec Services

Cognosec Services

A fast and effective compliance tool

If you’re a card acquirer (typically, a bank or other financial institution), you’ll need to take steps to ensure merchants (entities that accept it) comply with the 12 requirements of PCI DSS. If you’re a merchant or service provider (for example, a data centre, sales agent or remittance processing company) handling smaller numbers of transactions, you’ll need to prove your compliance through a Self-Assessment Questionnaire (SAQ).

We’ve developed an online portal that can help in either case – and make compliance and acquirer-merchant communication easier.

It’s a simple electronic tool, and it allows merchants to download the PCI SAQs, sign them and send them to acquirers, and acquirers to use the information to create reports for card providers.

Importantly, we can see all the data, and offer support for both acquirers and merchants. We even provide electronic certificates.

Our portal is the fast-track to compliance.

Download as PDF