PCI DSS Compliance Services in India

• Project Initiation
• Understand the organization
• Identify critical business services
• Identify information infrastructure

• Identification of the PCI Inscope Systems
• Determining the Networks that comes under CDE

• Determine the systems which store, process or transmit cardholder data
• Identify and validate the cardholder dataflow

• PCI awareness and the information on the audit process are well-communicated to the project stakeholders prior to the PCI Gap Assessment.

• PCI policies and procedures get reviewed to identify potential gaps associated with PCI documentation requirements.

• Review the PCI Controls implementation on the PCI CDE systems, including servers, desktops, applications & network devices

• Review existing policies
• Recommend new PCI policies
• Recommend new PCI procedures

• Review of the controls implemented
• PCI Consultancy on new controls
• PCI segmentation implementation reviews

• PCI Risk Assessment
• Track PCI implementation progress
• Periodic updates to the project team
• PCI Security Awareness training

PCI QSA will revalidate the final scope (PCI CDE) and evaluates the changes from the initial one.

The PCI QSA will perform the testing procedures as defined in the ROC template provided by PCI Council on the scoped PCI environment.

• Collect and archive the evidence
• Document the findings as per the ROC
• Validation of the ROC by a QA QSA
• Release the ROC for customer review