PCI Compliance

PCI Compliance Payment Card Industry Data Security Standards (PCI DSS)

PCI Compliance for Cloud Service Providers

If your business stores, processes or transmits credit card data, then the Payment Card Industry Data Security Standard (PCI DSS) applies to you. While understanding and adhering to the standards can feel daunting, rest assured we design compliance solutions with your unique needs in mind.

Achieve PCI Compliance with the Following Services

01. PCI Mapping

If you already have certain controls in place for other compliance reports, such as a SOC 2 report, we can identify those controls and map them to PCI DSS requirements.

02. Facilitated Self-Assessment Questionnaire (SAQ)

All merchants are required to complete the Self-Assessment Questionnaire (SAQ). Based on your organization’s payment card processing, we will review your environment, policies, procedures and controls to help you understand the purpose of each question and the response needed to comply with the requirements in the SAQ.

03. DSS Readiness Engagement

This is the assessment of your current controls against the requirements of PCI DSS. This process allows us the time to identify and address problem areas prior to the onsite assessment.

04. Onsite PCI DSS Readiness Engagement

Onsite PCI DSS Assessments are required for Level 1 merchants and service providers. Following a comprehensive assessment of your environment to ensure you meet all mandates, we partner with Qualified Security Assessors (QSAs) to write and submit a Report on Compliance (ROC) to the PCI Council, which validates your compliance.

How to Prepare

During the Readiness Engagement, BARR will help you prepare by assessing your controls prior to your onsite assessment. Here are a few tips to ensure your PCI assessment goes smoothly:

Understand Your Cardholder Data Environment (CDE)

Understanding your CDE is often referred to as “requirement zero.” Maintain current network diagrams that reflect how data is transmitted, processed, and stored to ensure your assessment goes smoothly.

Understand Your Requirements

Are you a service provider or a merchant? Protect yourself from last-minute surprises by recognizing any specific requirements that may apply to your organization.

Know Your Transaction Amount

Organizations are held accountable on the number of transactions handled annually. Prepare for your audit by having these numbers readily accessible.

Why BARR for PCI Compliance

BARR specialists have extensive experience helping organizations of all sizes solve PCI challenges
A trusted advisor to some of the fastest growing cloud service providers (IaaS, PaaS, SaaS) in the country
Serving the most regulated industries including technology, financial services, healthcare and government

BARR provides an easy-to-use project management tool that integrates seamlessly into your infrastructure
40% of BARR reports are delivered early
Competitive, fixed rates to accommodate growing enterprises
We put you and your business first, providing unparalleled communication and accessibility at all times