PCI DSS Gap Analysis

Our PCI DSS Gap Analysis is a review of an organisations Cardholder Data Environment (CDE), against the latest version of the standard. Performed during the early phases of PCI Compliance, it enables an organisation to quickly measure the effort and actions required to reach a compliant state. This is a crucial step for organisations preparing for a PCI DSS Assessment for the first time, or organisations building a PCI Remediation Programme.

Fast Track Your PCI DSS Compliance

Request a free PCI DSS Compliance Program consultation.

REQUEST FREE CONSULTATION

Overview

Our consultants will perform the review through performing on-site and remote interviews with staff members and documentation review. We then provide you with a detailed report documenting your current compliance status and any gaps identified aligned against the PCI DSS Standard.

Key Benefits

  • Provides you a snapshot of PCI DSS compliance
  • Identifies areas requiring immediate attention, and cost effective remediation solutions, in prioritised terms.
  • Provides you the awareness of your companies’ ability to comply with any new release of the standard, such as PCI DSS 3.0
  • Assists with PCI Compliance Programme cost forecasting, and budget justification.

Our Methodology

Step 1: Pre- Assessment Phase (Off Site)

  • Meeting with key staff members
  • Provide walkthrough of assessment activities, and agree roles

Step 2: PCI Business Process Review Phase

  • Walkthrough of Card Holder Data Environment, and documentation of components
  • Review of policies, standards, procedures and processes

Step 3: PCI Controls Analysis Phase

  • Findings and observations of current security controls,
  • Gap analysis of controls against the PCI DSS Requirements

Step 4: Reporting Phase

  • Preparation of PCI Compliance Gap Analysis Report
  • Presentation of findings and strategic recommendations

Timeframe

  • Total:       3- 5 days
  • Onsite:     1- 3 days
  • Remote:  1-2 days

Deliverables

  • Executive Summary Report– (including overall statement of compliance, and high level overview)
  • PCI DSS 3.2 Controls Analysis– (Compliant, Partially Compliant or Non-Compliant Status)
  • Strategic Remediation Actions– Detailed set of recommendations, and options for remediation to move toward a fully compliant state

Speak with us today, to learn how we can  help you measure the gaps, and the steps to take to achieve and maintain PCI DSS Compliance.

Optional Related Services