SAS 70 Solutions

Home

About Us

Home > Services > PCI Compliance Services

E-Mail This Link

Overview

Methodology

SAS 70 Readiness
Assessments

Type 1 SAS 70 Audits

Type 2 SAS 70 Audits

PCI Compliance Services

PCI COMPLIANCE SERVICES

Overview

Every entity that stores, processes or transmits cardholder data must comply with the Payment Card Industry Data Security Standard (PCI DSS). This standard is overseen by the PCI Security Standards Council and focuses on information security policy, cardholder data security, access control, network security and monitoring, and organizational vulnerability management.

Certain organizations are required to undergo annual onsite validation by a Qualified Security Assessor (QSA) depending on the nature of the organization’s services and annual transaction volume. SAS 70 Solutions is an accredited QSA and provides annual onsite validation services, as well as other PCI advisory services.

PCI Compliance Services

Our compliance validation services include the following elements:

» Planning and Strategy – We assist clients in determining the scope of
their cardholder data environment and constructing a PCI compliance
program.
» Readiness Assessment – We perform assessments services to assist
clients in identifying controls that require improvement prior to an actual
onsite PCI validation.
» PCI Validation – As a QSA, we provide annual onsite PCI validation
services to assess our clients’ compliance with the PCI DSS including the
issuing of a Report on Compliance (ROC).
» Program Management and Support – We provide program management
and support services to clients remediate and improve overall PCI control
structures.

Our Approach

SAS 70 Solutions utilizes a refined assessment methodology that allows us to conduct a thorough assessment while minimizing the time and effort commitment required of client personnel. Our professionals utilize the current PCI DSS including the testing methodology, prioritized approach, quality assurance standards, and other reporting procedures set forth by the PCI Council. For onsite PCI validation, we divide each project into the following phases:

» Project initiation and data gathering
» Cardholder data flow mapping and analysis
» Cardholder data controls assessment (utilizing the PCI DSS methodology)
» Gap analysis and reporting

Key Deliverables

Depending on the nature of our services, our projects result in the following deliverables:

» Cardholder environment scope analysis
» Compliance strategy and roadmap
» Readiness review findings and recommendations
» PCI DSS Report of Compliance (ROC)

Why SAS 70 Solutions for PCI Compliance?

Key benefits to selecting SAS 70 Solutions as your organization’s QSA include:

» Utilizing a provider with an established reputation and ability to service
   organizations in all major industries and of any size. Unlike smaller
   organizations, our company provides audit and assessment services to
   approximately 300 clients each year. Current clients include small and
   mid-size organizations, as well as, many publicly traded and Fortune 1000
   companies.
» Gaining the benefits of a provider with proven national and international
capabilities. Current clients are located in all parts of the United States, as
well as, many international locations.
» Obtaining industry expertise from thought leaders in the PCI industry. Our
   PCI practice leaders were among the early pioneers in the development of
   PCI standards and have held PCI practice leadership positions at major
   corporations, including VeriSign and Symantec.
» Receiving enhanced counsel that may result from our close relationships
   with the card brands PCI representatives. These relationships often allow
   us to work collaboratively with the card brands on client issues that are
   outside of the published guidance for the PCI DSS.
» Knowing that SAS 70 Solutions is independent of any technology or
   managed service. Clients understand the value of receiving
   recommendations that consider all alternatives, rather than those that are
   limited to specific products or vendors.

Contact Us
To discuss how we can help your organization,
call us toll-free at 1.866.254.0000 or
send us an e-mail.

Request a Consultation

Request a Rapid Quote

Submit an RFP

Client Login | Terms of Use | Privacy Policy | Contact Us