Description

Privacy protection concerns in the payment card industry have led to the card issuers creating an independent body with compliance standards called the Payment Card Industry (PCI) Security Standards Council.  Any business that handles credit card data must comply with the 12 requirements set out in the PCI Data Security Standard (DSS) in order to continue accepting credit cards in their business.  There are two programs established in order to oversee and assist organizations with achieving compliance.  Cyberklix is certified in both disciplines:

  Qualified Security Assessor (QSA)
  Approved Scanning Vendor (ASV)

Achieving DSS compliance is not a onetime event.  The PCI has set out initial mandates, in addition to ongoing quarterly and annual commitments for certification.  PCI can be overwhelming.  Cyberklix has developed a full range of services to help customers with their PCI compliance challenges.  Together these services are the Cyberklix PCI Compliance Program:

PCI Introduction: Self Assessment Questionnaire (SAQ) and common compliance failings.
PCI Gap Analysis: Identify gaps in becoming compliant with actionable recommendations.
PCI Scan: Network vulnerability scan and analysis of results (Quarterly Requirement by ASV).
PCI On-Site: Data security assessment conducted at customer site (Annual Requirement by QSA) and remediation recommendation.

• Currently collect store and transmit payment card information in your business and wish to continue to do so.
• Do not know where to start the compliance process.
• Perceive compliance as complex and costly.
• Do not know how to interpret PCI requirements.
• Do not recognize there is a direct ROI connected with compliance.
• Do not believe all 12 requirements can be met through one initiative.

• Acquire the ability to continue to conduct business collecting, storing and transmitting payment card information.
• The opportunity to improve process, policy and IT security posture is an outcome.
• Recognition as compliant to PCI standards and best practices.
• Avoid costly fines or suspension of business activities.