PCI QSA Qualified Security Assessor

Payment Card Industry Compliance Delivered by Certified Experts

Gap Analysis

Our experienced PCI DSS QSA team will assess each payment channel, accurately positioning your organisation against the PCI DSS standard. You will receive a report detailing current strengths and weaknesses, alongside actionable and proportionate recommendations.

Your gap analysis will typically consist of four key phases: a pre-assessment, a process review, a technical control analysis, and the write-up. Throughout this time, our security assessors will evaluate policies, processes, and procedures, as well as observing and testing security controls and associated technical documentation.

Ultimately, this project aims to provide tactical and strategic recommendations that give your organisation the information needed to minimise the risk of non-compliance.

Help With Remediation

Our PCI DSS QSA team are on-hand to guide you through the remediation process, working closely with your technical and business teams to implement proportionaterisk-based, and compliant fixes.

Our aim is to be a trusted advisor who works closely with your team to help you to understand the letter and intent of each PCI requirement and control objective.

Report on Compliance

Our Report on Compliance (ROC) service is designed for Level 1 and Level 2 merchants and is performed by one of our Qualified Security Assessors.

This is an in-depth service and rigorous examination of the Payment Card Industry Data Security Standard spanning 400 individual controls.

Your assigned consultant will work with you to accurately validate your scope, before conducting thorough testing activities on your systems and infrastructure.  Your assessment will result in a formal report that attests to your compliance with the PCI DSS standard.

Contact Us

Send us a Message







We are always happy to make contact with you by either phone, email or a face to face meeting at our office or yours. We work standard UK office hours – every week day 0830 to 1730.


Latest Articles

GDPR Radio – News & Views

Click the player below to listen to our latest recording of GDPR Radio, where our top consultants Oliver Rear, Philip Brining and David Holmes join... Read MoreI

Information Governance: Achieving and Maintaining Accountability

Click the player below and listen to this weeks episode of Data Protection Made Easy where we discuss Information Governance in Local Authorities. During this... Read MoreI

Information Sharing – Advice for Practitioners Providing Safeguarding (Part 2)

Last week’s episode of ‘Data Protection Made Easy’ was one of our busiest yet, we hosted back to back webinars on Information Sharing with over... Read MoreI

Information Sharing – Advice for Practitioners Providing Safeguarding Services

Data Protection People work with several schools, colleges, universities and multi-academy trusts and the common questions asked are about Data Sharing, Safeguarding and Data Protection,... Read MoreI

GDPR Radio – News & Views

This weeks episode of GDPR Radio was an extra special one as Phil and Dave were in the same office at the same time which... Read MoreI

PCI DSS – Everything you need to know

Click the player below to listen to our latest episode of Data Protection Made Easy. During this session, our brilliant hosts Oliver Rear, Philip Brining... Read MoreI