PCI DSS Compliance
Payment Card Industry Data Security Standard

Phase II – Inventory and Dataflow

Inventory and document the flow of credit card information throughout the organization’s various processes, including data origination, data in motion, data at rest and data in use. During the credit card information lifecycle assessment, we will utilize the following attributes associated with the flow of credit card data:

• Data origination: The methods for initiation of credit card transactions throughout the organization including identifying the electronic and manual methods used to accept credit card information.
• Data in Motion: Map the flow of the credit card information throughout the organization either in paper or electronic form to identify an inventory of all technology components that are instrumental in the transportation, processing and routing of the credit card information.
• Data at Rest: Identify throughout the organization where credit card information is stored and the format (paper, electronic) of the data.
• Data in Use: Develop a list of personnel that can access or utilize the credit card information.

Phase III – Design and Scoping

Begin to formulate our strategic IT architecture and process design recommendations that will limit the areas of the network that fall within the scope of the PCI compliance effort.

Phase IV – Reporting and Remediation Roadmap

Prepare an executive-level report detailing the results of our analysis designed to provide a realistic understanding of the current state of your control environment and the risk associated with each of the identified weaknesses or gaps.

Phase V – Sustainment and Governance

Provide recommendations that would enhance your compliance governance structure and embed controls in your ongoing processes that will address key security and control activities into operational processes, helping make PCI a core organizational competency. 

Our approach can be tailored to meet the existing needs of, and the current task being undertaken by your organization.