Our Process
What makes our process unique is that fact that we do all of the work for you.
We don't hand you a stack of forms and send you on your way!
We are the only phone call needed to be on your way to full PCI DSS compliance.
We will handle everything and provide details to ensure the process is as easy as possible.
In many cases, we can have your site PCI DSS compliant in less than 24 hours!
Step 1:
Determine your PCI DSS Compliance level:
The requirements for PCI DSS compliance vary for each level, so it is important to properly identify your merchant level.
Level 1: Any merchant processing over 6,000,000 transactions per year and/or any merchant who has suffered a security breach that resulted in account data being compromised.
Level 2: Any merchant processing 1,000,000 - 6,000,000 transactions per year.
Level 3: Any merchant processing 20,000 - 1,000,000 e-commerce transactions per year.
Level 4: Any merchant processing fewer than 20,000 e-commerce transactions per year, and all other merchants processing up to 1,000,000 transactions per year.
Step 2:
Assessment of your current software/web site:
We will evaluate your current site, software, shopping cart system and security practices to determine if there are any existing vulnerabilities, unsafe or non-compliant practices.
After completion of site evaluation, we will report findings and provide any applicable instructions, if necessary, to remedy any possible non-compliance issues.
Upon successful completion of site evaluation, we will perform a Network Security Scan for your web site
(required quarterly for all online merchants).
The Network Security Scan:
· Is non-evasive (will not disrupt site/network operation)
· Meets all requirements of Visa's CISP and AIS
· Meets all requirements of MasterCard's SDP
· Meets all requirements of American Express' DSS
· Meets all requirements of DiscoverCard and JCB
· Provides remediation report for any vulnerability
Step 3:
SAQ and Review of Report:
Download, complete and submit the
PCI Self-Assessment Questionnaire* (SAQ).
Upon completion of the Network Security Scan and the SAQ form, we will provide you with your Certificate of Compliance, which will include any existing network/server vulnerabilities.
If no vulnerabilities exist, your Certificate of Compliance will demonstrate full compliance and is accepted by all credit card companies and banks worldwide.
*Assistance available with choosing and/or completing SAQ form.
PCI Self-Assessment Questionnaire submission required annually.
Step 4:
Remediation and Final Submission:
If vulnerabilities exist, your Certificate of Compliance will state "Non-Compliant" and will provide full remediation report and plan to assist in resolving these issues.
Upon successfully passing the Network Security Scan, achieving "Compliant" status and completing the SAQ form, we will assist you in finalizing these forms and submitting the appropriate forms to your bank and/or card processing company.
We Make It That Easy!
Click Here To Get Started Now!
