PCI DSS

IT support for your PCI DSS compliance work

Payment-card security depends on how your systems are configured, accessed, and maintained. PC NET TECHS helps with the practical IT safeguards and documentation that support your organization's PCI DSS work.

Understand the payment environment first

The Payment Card Industry Data Security Standard (PCI DSS) addresses the protection of payment-account data. The relevant scope can include systems that store, process, or transmit that data, as well as systems that affect the security of the payment environment. Your payment provider, acquiring bank, or assessor helps establish the validation process that applies to your business.

Focus the IT work on your environment

These are the areas to discuss and scope for your payment environment.

Network safeguards

Review firewall configuration and separation between payment systems and other networks.

User and administrator access

Review accounts, permissions, and stronger sign-in controls.

System maintenance

Address supported software, patching, and endpoint protection.

Documentation and follow-through

Record relevant configurations and the agreed remediation work for your compliance process.

Coordinate with the people handling validation

If your validation process calls for a Qualified Security Assessor or an Approved Scanning Vendor, those roles must be handled by appropriately qualified providers. PC NET TECHS focuses on the supporting IT work included in your agreement.

Reference

Official guidance

The PCI Security Standards Council publishes the standard and its supporting documents.

Questions

Common questions

Is a secure payment terminal enough to settle our PCI obligations?
The answer depends on your payment setup and the systems involved. Confirm the applicable scope and validation requirements with your payment provider or assessor.
Does PC NET TECHS issue PCI certification?
This service concerns IT implementation and support. Any required formal validation is handled through the applicable payment-industry process and qualified providers.
What should we bring to the initial conversation?
Your payment setup, the requirements supplied by your processor or bank, and any existing findings. Do not send cardholder data through the website form.
Related

Related pages

Compliance support

Other compliance support

Contact Us

Get a practical read on your IT risks and priorities.

Tell us what is going on with your technology. The initial consultation is free. If there is a fit, we will recommend the right support path, products, and next steps.

Call Us

Press 3 — SalesPress 4 — Support
Real people answer the phone, or call you back as soon as possible.

Request your free consultation

Request sent!

We've received your request and will reach out shortly. For anything urgent, call 866-661-5428.