PCI DSS Resource Guide

Download your PCI DSS Resource Guide

Download your Resource Guide Now!

Full Name*
Business Email*
Company*
Phone*
Country*
Comments
This field is for validation purposes and should be left unchanged.

If you’re preparing for a PCI DSS compliance audit and want to ensure your success, downloading our PCI DSS Resource Guide will guide you along the process. This guide can be used by CISO, CRO, CSOs to not only get PCI Compliance posture immediately but also evaluate the Cyber Risk Assessment.

ControlCase is a PCI Assessor approved by the PCI Security Standards Council.

ControlCase helps Service Providers and Merchants protect cardholder data and achieve PCI DSS Compliance with ease

1 On-Time Compliance & Automated Evidence Collection

2 Partnership Approach – Avoid Checkbox auditors

3 Receive ISO 27001, SOC 2 and HIPAA as part of your certification process

Contact us today!

USA +1.703.483.6383

CANADA +1.416.900.1272

UK / EUROPE +44.734.120.5513

INDIA / GULF REGION +91.22.50323006

ASIA PACIFIC +66.21056164

FREQUENTLY ASKED QUESTIONS

What is PCI DSS?

PCI DSS stands for Payment Card Industry Data Security Standard (PCI DSS) – Established by leading payment card issuers, the PCI DSS provides guidelines for securely processing, storing, or transmitting payment card data.

What is the purpose of PCI PSS compliance?

The standard aims to protect organizations and their customers against payment card fraud and theft.

Who does PCI DSS apply to?

All Service Providers and Merchants who accept, store, or transmit card data must be compliant to the PCI DSS standard. Annual validation (or proof) is required by most merchant processors and is a way of demonstrating your environment is secure. Based on the number of payment card transactions you conduct annually, you will require a Self-Assessment Questionnaire (SAQ) or an independent onsite audit.

How often do l need PCI DSS compliance?

PCI DSS is an annual certification – however, you are required to maintain the security of your environment on a business-as-usual basis in order to achieve ongoing certification.

What are the different levels and what are the final deliverables?

PCI DSS Level 1 Merchant – Requires a Report on Compliance (ROC)
PCI DSS Level 2 Merchant – Requires a Report on Compliance (ROC) OR appropriate Self-Assessment Questionnaire (SAQ)
PCI DSS Level 3 Merchant – Requires appropriate Self-Assessment Questionnaire (SAQ)

What is a Report on Compliance (ROC)?

A ROC must be completed by a Qualified Security Assessor (QSA) after a PCI DSS audit. It is then submitted to the merchant’s acquirer who, after accepting the ROC, sends it to the payment brand for verification.

What is a Self-Assessment Questionnaire (SAQ)?

Merchants are required to complete a Self-Assessment Questionnaire (SAQ) for PCI compliance. Which one you need, is determined by the way your business handles payment card data.

Click Here to View our post on the different SAQs.

How can we achieve PCI DSS compliance in a cost-effective manner?

You’ve come to the right place! We will work in partnership with you and get you there! First, we need to determine which PCI DSS validation level is required for your business. Then we will assist you in addressing all requirements and attest your compliance annually. ControlCase is your one-stop-shop! We will help you achieve compliance; as well as assist with the cybersecurity requirements that need to be completed, such as; vulnerability assessments, penetration testing, policy & procedures, and security awareness training.