Our role: A formal PCI DSS Report on Compliance is issued by a PCI SSC Qualified Security Assessor (QSA). Rakvora provides gap assessment, segmentation and penetration testing, and remediation support so your QSA assessment goes smoothly.
Any organisation that stores, processes or transmits card data must comply with the Payment Card Industry Data Security Standard (PCI DSS).
We help you reduce scope, assess your controls against PCI DSS v4.0, perform the required penetration and segmentation testing, and prepare you for your QSA.
Objectives
- Define and minimise cardholder data environment scope
- Gap assessment against PCI DSS v4.0 requirements
- Internal, external and segmentation penetration testing
- Remediation and evidence preparation
Methodology
01
Scoping
- Confirm the applicable regulation, circulars and in-scope systems
- Agree timelines against your regulatory deadline
02
Pre-audit assessment
- Control-by-control review against the regulatory checklist
- Vulnerability assessment and penetration testing of in-scope systems
03
Remediation
- Prioritised fix plan with owners and dates
- Hands-on support closing gaps and updating policies
04
Audit readiness
- Evidence pack organised to the auditor's checklist
- Support during the statutory audit and closure of observations
Deliverables
Pre-audit gap assessment report
VAPT report with retest
Remediation tracker
Evidence pack for the statutory auditor