PCI Certification Methodology

Controlcase resources and global delivery

As per PCI Standards Council requirements in additional to company requirements, the individuals within QSA firms engaged in PCI audits must be separately qualified. These individuals are called Qualified Security Assessors. ControlCase leads the industry with the number of personnel certified as QSA’s, and continues to certify additional auditors on an on-going basis.

In addition to the basic QSA qualification, ControlCase also has resources that have been qualified as QPASA’s (Qualified Payment Application Security Assessors) to perform PCI Payment Application Security, PABP Assessments.

With offices and resources located all over the globe, ControlCase has both the certified PCI DSS resources and proven methodologies required to assist your organization to efficiently comply with the PCI DSS standard, no matter where you are located.

Standard PCI methodology

ControlCase strives to provide efficient and managed compliance. We work hard to make the compliance process simple and straightforward for your organization, utilizing our proven ControlCase PCI Compliance Manager solution in conjunction with the following methodology:

• Perform initial audit
• Perform a gap assessment
• Perform required vulnerability scans and penetration testing
• Create a remediation plan
• Provide remediation support
• Perform an off-site audit
• Perform an on-site audit
• Provide a draft report on compliance
• Provide the final report on compliance
• Provide ongoing monitoring and assistance with compliance efforts