We are your reliable and professional partner for all topics concerning PCI certification, compliance and information security!
You are a …
Service Provider
Are you looking for a QSA auditor who can help you to prepare and implement PCI DSS certification, validate and certify a P2PE solution, or do you need support with questions relating to the PCI PIN security standard …
Software Vendor
Do you require review and certification of a payment application in line with the SSF standard, or support in establishing SSF requirements in order to offer your clients a PCI-compliant software solution …
Acquirer/Issuer
Do you wish to run your processing environment according to the PCI DSS requirements, are you interested in consultancy services for implementation of PCI PIN security, or do you need support with certification of your merchants …
Merchant
You require assistance and support in the implementation of the PCI DSS requirements, in the analysis of how to define the optimum PCI strategy and locating a suitable service provider, or you need help in completing the SAQ …
We are the experts for these Standards
Our expertise – Your success
As an authorized QSA audit company for the PCI DSS, SSF/PA-DSS, P2PE, PIN, and 3DS standards, we carry out audits according to the requirements of the PCI Security Standards Council (PCI SSC) and the program guidelines of the individual PCI standards. All over Europe, payment service providers, processors, software manufacturers and merchants trust our audit experts with their vast experience in PCI certification.
The scope analysis and any possible subsequent scope optimization pinpoint the relevant areas of PCI certification. According to the PCI guidelines, the scope analysis is primarily the client’s responsibility. Our experienced auditors and their know-how give support to our clients in the analysis of the existing PCI scope. If this analysis reveals optimization possibilities for a reduction of the extent of the scope, then our highly experienced experts can help to design an optimized scope, as well as the implementation work which will be required to achieve it.
During a gap analysis, we review the current ACTUAL status of the IT infrastructure and check the processes and documentation for compliance with the respective PCI requirements. The results of the gap analysis reveal the adaptation work and modifications which are needed to prepare a business for a compliance audit. The gap analysis gives clients detailed and significant information which will help them to identify and establish the corrective actions which form the basis of successful PCI certification.
We offer a wide range of workshops for our clients, from general introductions to the respective PCI standard to technically challenging workshops for your in-house specialists. The aim of every single workshop is to provide our clients with tailor-made information and knowledge on PCI requirements at all levels. Benefit from our many years of experience in projects for diverse client groups and sectors.
We can offer you a wide range of training courses which can be held at your company premises. These courses cover topics which are relevant for PCI certification, or, in most cases, may even be a prerequisite for successful certification. Examples of topics are awareness training and secure coding courses, for example. We also offer security training course which are tailored to your respective needs – simply get in touch to ask us about them.
During the deployment phase as well as throughout the year between reaudits, we advise and support our clients in all matters relating to PCI compliance. Use our consultants as competent sparring partners for clarification of compliance-related issues.
Do you need support with the deployment of new technologies or processes? We can advise you on understanding and adhering to the PCI requirements and how they impact the reimplementation or adaptation of existing systems and processes.