pci-preflight.md

layout	permalink	title	tags	modified
page	/services/pci-preflight/	PCI Preflight Service	responsive software development service dev-on-demand contract hourly retainer senior user experience engineer	2014-09-29

Are you ready to ROC? How will your company benefit from Payment Card Industry (PCI) Compliance? The experts at gig offer experience that comes from having achieved Level 1 PCI compliance four years in a row. Get ready now with gig PCI Preflight Service.

PCI Preflight Checks

• End-to-end examination of systems, deployment and hosting
• Identify remedies
• Goal-setting: Level 1 PCI Compliance, Level 2?
• Produce a requirements document
• Work estimates
• Document the system for a QSA auditor
• Once ROC is accepted, can apply for Card provider public list status.
  • Visa Cardholder Information Security Program (CISP)
  • MasterCard Site Data Protection (SDP)
• Identify which documents can be shared in response to inquiries

Typically, the first year of PCI compliance auditing is the toughest. In subsequent years, many of the answers are boilerplate, unless your system design changes. QSAs also like to add a few spot checks each year. gig can also help companies that need to bring their systems up to date with the latest PCI DSS 3.0 standard.

Apply for CISP and SDP

The card provider lists (Visa CISP) and (Mastercard SDP) offer a designation separate from, not required for, PCI compliance. Yet, they are regarded as the gold standard by many business partners and clients. Having your company listed publicly by Visa or MasterCard tends to shorten inquiries. You can always decide whether to apply for these programs after your Report On Compliance (ROC) has been accepted.