NDB's highly skilled and competent consultants provide the following pre-assessment services

NDB provides PCI DSS Readiness Assessments and Gap Analysis consulting services for organizations seeking to become compliant with the Payment Card Industry Data Security Standards (PCI DSS) provisions. Whether your organization is looking for assistance with the PCI DSS Self-Assessment Questionnaires (SAQ) or requires an actual Level 1 on-site assessment by a Qualified Security Assessor (PCI-QSA), NDB's highly skilled and competent consultants provide the following pre-assessment services:

• Discussing your overall PCI needs, timeframe for compliance, expectations, etc.
• Properly scoping the assessed cardholder data environment (CDE) as required by the PCI DSS provisions for all 12 requirements, sub-requirements, and the all-important Appendix A.
• Providing all necessary PCI DSS policy and procedure templates, along with active assistance in customizing and developing said documents.
• Recommending numerous open-source and cost-effective tools for PCI compliance, such as the following: Web Application Firewalls, Two-factor Authentication systems, File Integrity Monitoring (FIM) solutions, Anti-Virus Software.

PCI DSS Readiness Assessment & Gap Analysis
- It's About Getting you Ready

It is critical that organizations undertake a PCI DSS Readiness Assessment | Gap Analysis engagement for ensuring the overall success of one's PCI certification process. A poorly planned, under-funded, incorrectly scoped engagement will lead to numerous delays, operational constraints, and numerous other challenges. Thus, look upon a PCI DSS Readiness Assessment as not merely an additional cost to the engagement, but a highly useful, proactive, and necessary process for achieving PCI compliance in an efficient, cost-effective, and timely manner.

Keep in mind that one of the most notable areas for remediation for PCI is that of policies and procedures - or the lack of them - for which merchants, service providers and all other intended parties must develop. Our lead PCI-QSA at NDB has developed his own set of customized PCI policies and procedures, which are included with any type of PCI engagement that NDB undertakes. Take the next step by contacting our most senior PCI-QSA today This email address is being protected from spambots. You need JavaScript enabled to view it., or at 1-800-277-5415, ext. 705 to learn more.

Additional PCI DSS Services from NDB

PCI DSS Policy Writing

Writing policies and procedures is one of the most time-consuming endeavors for becoming PCI DSS compliant. What used to take dozens of hour by internal personnel or thousands of dollars spent on external consultants can now be done quickly and easy with NDB’s ready-to-go PCI DSS policy templates. Available to all of our valued customers, the templates are a great way to save both time and money, while also becoming PCI DSS compliant. It’s a win-win, so contact NDB’s PCI-QSA today at 1-800-277-5415, ext. 705 to learn more. Bottom line; if you store, process and/or transmit credit card data, you need to become compliant with the Payment Card Industry Data Security Standards. NDB can help.

PCI DSS Level 1 Onsite Assessments

As a merchant or a service organization, if you need to become PCI DSS compliant and it requires an actual onsite assessment by a Payment Card Industry Qualified Security Assessor (PCI-QSA), then NDB can help. Our QSA’s have been fully licensed since 2008 to issue Level 1 and Level 2 onsite assessments. Take the next step by contacting our most senior PCI-QSA today This email address is being protected from spambots. You need JavaScript enabled to view it., or at 1-800-277-5415, ext. 705 to learn more.

PCI DSS Self-Assessment Questionnaire (SAQ) Assistance

The vast majority of merchants and service providers seeking PCI DSS compliant can do so via the Self-Assessment Questionnaires (SAQ).

Penetration Testing

NDB offers fixed-fee penetration testing for organizations requiring to undergo annual tests for PCI DSS compliance. Penetration testing “can” be expensive, time-consuming, and complex, but not with NDB. Our penetration testers have years of proven experience in performing all types of pen tests – network layer application layer, etc.).

PCI DSS Continuous Monitoring

Becoming PCI DSS compliant is a big accomplishment – no question about it – but remember, you’ll need to continue to monitor your controls for ensuring compliance is being upheld at all times. NDB offers comprehensive continuous monitoring solutions for helping merchants and service providers stay compliant with the PCI DSS standards. If you store, process and/or transmit cardholder data, then you need to become PCI DSS compliant. Take the next step by contacting our most senior PCI-QSA today This email address is being protected from spambots. You need JavaScript enabled to view it., or at 1-800-277-5415, ext. 705 to learn more.