PCI Policy Writing Services
Obtaining PCI DSS certification requires putting in place a large number of policies and procedures. From Requirement 1 to Requirement 12, there can be as many as fifty PCI policies and procedures that need to be in place. This often equates to dozens of hours and thousands of dollars of internal expenses for writing these policies. But, there is a better way, the NDB way.
We offer our clients two (2) great options when it comes to developing policies and procedures for PCI DSS compliance. First, NDB can provide clients with our industry leading PCI policy templates, a great resource for helping merchants and service providers develop their own policies quickly and efficiently. Second, if clients don’t have the time to use our cost-saving templates, then NDB can author your policies and procedures for you. Contact our most senior PCI-QSA today This email address is being protected from spambots. You need JavaScript enabled to view it., or at 1-800-277-5415, ext. 705 to learn more.
PCI Control Remediation
Many of the remediation requirements for PCI DSS compliance are either technical or operational in nature. While policies and procedures receive the lion’s share of attention in terms of remediation – and rightfully so – don’t forget about other critical areas. Examples of technical or operational remediation include, but are not limited, to the following:
- Weak access controls and password complexity rules.
- Poorly configured I.T. systems, such as servers and network devices.
- Missing incident response programs.
- No evidence of a risk assessment performed.
- No formal third-party vendor management program in place.