Contract our PCI DSS Gap Analysis service and one of our expert PCI consultants will review your in-scope systems and networks, providing you with a detailed report about the areas that need attention. You will also receive a plan to bridge the gap between your current security posture and full compliance with the Standard, demonstrating the necessary corrective actions and enabling you to reduce the risk of a data breach.
Your challenge
A PCI DSS Gap Analysis can help your organisation pass the annual audit, or build a cardholder data environment and infrastructure that meet the requirements of the Standard. Our PCI DSS Gap Analysis helps you use PCI compliance as the starting point for a security strategy. You'll find out where improvements are needed and what steps to take to close the gaps. By completing a gap analysis, you can:
- Create a snapshot of PCI DSS compliance.
- Identify areas requiring immediate attention, and cost-effective remediation, in prioritised terms.
- Avoid the financial penalties and negative PR associated with a data breach.
- Improve cost forecasting and budget justification for a PCI compliance programme.
Our service offering
- A high-level assessment of your specific PCI DSS compliance requirements.
- An assessment of the scope of your cardholder data environment (CDE).
- A mapping of in-scope devices and networks/subnets.
- A review of the applicability of the Standard to your systems.
- Identification of current cardholder data processes and storage locations.
- Identification of third-party or service provider dependencies.
- A review of the data flow diagrams of the cardholder data.
- A review of the asset inventory, system inventory, network diagram and business processes.
- Identification of high risks and long lead-time elements.
- Assessment of the existing information security management system (ISMS) to determine its applicability and any additional procedures required by the PCI DSS.
- A detailed set of outcomes that will inform the next stage of your project.
- A strategic roadmap, containing a description of the changes necessary to comply with the PCI DSS.
- A management report outlining the findings of the gap analysis.
Why choose us?
- We have extensive ISO 27001, PCI, penetration testing and business continuity management/disaster recovery expertise.
- You will be able to make clear recommendations to senior management on the implications of technology decisions on compliance and security.
- With our CREST and QSA memberships, you can be assured that our services meet the highest industry standards.
