Not required to be PCI compliant? Many organizations choose to assess against PCI to understand and proactively address privacy issues, the handling of sensitive information within the organization, and the transmission of sensitive data across public networks.

If you are a Level 1, 2 or 3 merchant, or if you are a payment gateway or service provider, you are required to comply with the PCI DSS. Click here for our PCI DSS FAQ.

Late 2006, Visa USA pledges $20 million in incentives to protect cardholder data. They became the first payment brand to combine financial incentives and fines to encourage adoption of industry security standards.

Service Description
Solutionary's PCI DSS audit and assessment service consists of both on-site and off-site activities by Solutionary PCI qualified security assessors (QSAs) and project managers. Solutionary evaluates current payment/credit card security programs against the applicable PCI standards using our proven methodology, which includes remediation strategies for all areas assessed as "out-of-compliance".

For PCI DSS audit and gap assessment engagements, Solutionary assigns a project manager as your advocate to provide project support for all activities conducted during the engagement. PCI engagements are performed in phases: the assessment against the PCI DSS, the out-of-compliance (OOC) reporting, and the submission-ready (for those organizations that require submission of audited results) Report on Compliance (ROC).

The Solutionary Advantages
Solutionary listens to your project requirements. Those requirements, coupled with our experience in performing hundreds of similar engagements, have led us to assemble a world-class information security project and technical team. Click here to download a case study of how we helped a Fortune 100 media organization address their PCI requirements. Additionally:

• Solutionary can provide you with our automated PCI self-assessment technology called SecurComply SM PCI. If you only want or need an understanding of your level of PCI compliance, the self-assessment is a cost effective way to accomplish what could otherwise be a daunting task.
• Our online portal option enables clients to better understand PCI requirements and guides you through the compliance process.
• Solutionary can summarize findings from a DSS audit or gap assessment, and facilitate a working session with each of the assessed business units, as well as corporate, to develop and document an on-going PCI program strategy.

Service Benefits
As certified PCI auditors, we are uniquely qualified to position your engagement with as much or as little involvement as is necessary to achieve your needs, and save you resource time and budget dollars.

• Solutionary can help define strategic and tactical initiatives.
• We deliver actionable, prioritized recommendations.
• We help you maintain compliance throughout the year.
• Solutionary can provide on-site PCI training sessions.

As with most regulatory compliance issues, like security in general, PCI compliance is not a one-time event. Solutionary can be your trusted security advisor and assist you with PCI or any security initiative that could benefit from professional input.

At Solutionary, we make security manageable.