PCI DSS assessments.
QSA-led formal assessments to validate your payment security controls.
What you get
- Formal assessments with ROC and AOC reporting
- SAQ support and gap analysis
- Targeted risk analyses
Who we help
Organisations that store, process or transmit payment card data, and service providers supporting payment environments.
Supporting organisations across North America, Europe and the UK.
How it works
Scope
Agree your payment environment, validation route and evidence requirements.
Assess
Review the relevant controls and evidence with a QSA-led assessment.
Report
Receive reporting appropriate to the agreed scope, including ROC and AOC support.
About this service
LockedStack provides QSA-led PCI DSS assessments, with reporting appropriate to the agreed scope and validation route. We support Reports on Compliance (ROC), Attestations of Compliance (AOC), Self-Assessment Questionnaires (SAQs), gap analyses and targeted risk analyses. Scope, evidence requirements and deliverables are agreed at the start of the engagement.
Your questions, answered
What does an assessment involve?
We agree the scope and validation route, review the relevant controls and evidence, and document the findings and required reporting. The approach is tailored to your payment environment.
Can you help us prepare?
Yes. SAQ support, gap analysis and targeted risk analyses are available. We agree which services and deliverables you need at the start.
How do we get started?
Tell us about your organisation, payment environment and assessment requirements. We will discuss the scope, evidence and next steps with you.
Related services
Let’s talk about your next step.
Tell us what you need. We’ll help you agree a practical way forward.