Payment Card Industry Data Security Standards (PCI DSS Services)
RubinBrown’s Cyber Security Services team has developed a combination of technical, procedural, and supporting services to assist our clients with PCI DSS compliance.
Payment Card Industry Data Security Standards (PCI DSS Services)
RubinBrown’s Cyber Security Services team has developed a combination of technical, procedural, and supporting services to assist our clients with PCI DSS compliance.
Credit card processing is a business requirement in our “cashless” and “no-touch” world, and still the target of cyber criminals around the world. Accepting credit cards as part of business requires compliance with the Payment Card Industry (PCI) Data Security Standard (DSS) requirements.
While credit card compliance requirements are not new, the threats and technologies continue to evolve, as does the PCI DSS. RubinBrown is one of few public accounting firms that provide PCI DSS consulting, reviews, and formal assessments under the PCI DSS examination of compliance standards.
RubinBrown’s Cyber Security Services team has developed a combination of technical, procedural, and supporting services to assist our clients with PCI DSS compliance.
- Providing readiness assessments, consulting and compliance documentation support to keep your organization aligned with requirements, and
- Conducting formal PCI DSS assessments for Service Providers and Merchants.
- Understand the scope – gaining and understanding and documenting the scope is the critical first step;
- Manage the scope – once the scope is well understood, manage it to ensure it only grows (or shrinks) by design
- Reduce the scope – the key to keeping PCI DSS compliance costs to a minimum. Use authorized and recommend changes to the CDE to minimize the scope.
Proactive scope management can change the required Self-Assessment Questionnaire (SAQ) and significantly reduce the costs of ongoing compliance efforts. Balancing operational factors with compliance requirements can be complicated. Our team can help with the technical compliance efforts so you can focus on the business
We develop customized solutions for you ranging from annual updates and reviews, to periodic touchpoints to review compliance status and supporting evidence, or fully integrated support. Our compliance management support can be combined with our virtual Chief Information Security Officer (vCISO) services to manage the following, as needed:
- enterprise cyber security,
- PCI DSS, and
- other compliance requirements
- assist with the identification and completion of the required SAQs,
- complete the Report on Compliance (ROC), and
- complete the Attestation of Compliance (AOC) that meets the needs of your Merchant or Service Provider environment.
.jpg)
Our technical assessment team can assist with the required assessments including:
- External Vulnerability and Penetration Testing
- Internal Vulnerability and Penetration Testing
- Network Segmentation Testing
- Firewall Rule Set Reviews
- Web Application Security Assessments