PCI DSS is the standard to increase controls around cardholder data to reduce credit card fraud. Validation of compliance is performed annually. It is global security standard for credit cards showing Implementation measures for companies that "process", "store", "transmit" cardholder information such as card-present and card-not-present merchant, processing company, internet payment service provider etc. for the sole purpose of protecting credit card information.

Who should comply with?

The PCI DSS applies to ANY organization, regardless of size or number of transactions, that accepts, transmits or stores any cardholder data.

The merit of the compliance

Increase Protection of own asset and peace of mind, Better customer relationship, and get extra-guidance with practical cost on universal standard.

What this service provides?

1. Preliminary document review of policies, NW diagrams etc. submitted by your company ... 5days
2. On-site interview, record confirmation, actual machine verification ... 8days
3. Additional evaluation ... 1day
4. Creation of ROC, AOC (BBSec) ... 20days
5. Quality check of evaluation report (BBSec)

Assessment on AWS

Through this assessment, we will clarify the need for enhanced security using AWS services that is sufficient for PCI DSS compliance.

Our PCI DSS Service region

Our PCI DSS Service region covers all Asia Pacific countries, as well as the United States and Europe.

Our team and achievements

• QSAC started in 2008
• 26 PCI Qualified Security Assessors (QSAs)
• 6 PCI Associate Qualified Security Assessors (AQSAs)
• 2 P2PE Payment Application Assessors (P2PE PA-QSAs)
• 1 3-Domain Secure (3DS) Assessor (3DSA)
• 3 Card Production Security Assessors - Logical (CPSAs - Logical)
• 4 Card Production Security Assessors - Physical (CPSAs - Physical)
• Over 250 cases of consultation experience
• Multi-lingual response Japanese, Korean, English and Thai