PCI Compliance Assessment Services

As a PCI Qualified Security Assessor (QSA) and an Approved Scanning Vendor (ASV), Sunera provides on-site PCI data security audits, remediation assistance, security scans, secure code audits and compliance reporting to payment card industry members, merchants, and service providers that are required to achieve and maintain PCI compliance. The PCICo requires the use of PCI Qualified Security Assessors to perform PCI on-site security audits using the PCI Security Audit Procedures to assess compliance with the PCI Data Security Standard.

A Proven Process

Resources

All members of the Sunera information security team are Certified Information Systems Security Professionals (CISSP) and Qualified Data Security Assessors (QSA). Each Sunera QSA has successfully met the PCICo requirements to provide PCI data security assessment services and issue Reports on Compliance (ROC). With Sunera as your partner, you will always receive expert assistance from industry recognized experts.

Process Overview

The Sunera assessment process minimizes the impact on business operations by providing a logical, structured approach that emphasizes productivity and maximizes return on investment. A brief example of how Sunera conducts assessments follows:

• Define the scope of work to be performed during the assessment.
• Conduct a pre-assessment meeting to establish expectations, identify the key players in the assessment process, and to provide guidance to the client.
• Receive and review off-site all relevant policies, procedures, and technical documentation.
• Arrive on-site and perform the data security assessment process as detailed in the initial scope of work.
• Provide an initial statement of findings which identifies deficiencies and provides recommendations so that remediation efforts may begin as promptly as possible.
• Generate a Report on Compliance.
• Conduct quarterly and/or on-demand network scans to fulfill ongoing PCI compliance requirements.