If your business accepts credit cards, your card processor expects you to comply with the Payment Card Industry Data Security Standard (PCI DSS). Most small businesses show this once a year by completing a Self-Assessment Questionnaire (SAQ) in a portal run by their processor or its compliance vendor, such as Trustwave. Depending on how you take cards, you may also need quarterly vulnerability scans of your internet-facing systems. The current version of the standard is PCI DSS v4.0.1.
How CSSI helps
We work out which questionnaire fits how you take cards, review your network, computers and payment setup against it, and show you what still needs work. Then we make the changes, such as firewall rules, separating card terminals from the rest of your network, updates, antivirus and access controls. We help you answer the questionnaire and fix anything a vulnerability scan turns up.
Compliance work without surprise downtime
Many requirements mean changes to your network and systems, and those changes can cause outages if they are rushed. We plan the work so your business keeps running.
CSSI has helped machine shops, surgery centers, schools and small local businesses with PCI compliance. Defense contractors can also see our NIST, DFARS and CMMC compliance page.
Call 859-226-9222 to talk with us about PCI compliance.