01
Payment channels
Record every method of accepting transactions and the systems involved.
The initial PCI DSS review
Start with the payment flow.
Prepare for the first PCI DSS conversation by mapping payment flows, systems, providers and responsibilities.
THE STARTING POINT
The questions worth asking.
Before discussing technical remediation, record how each transaction takes place. Include the online shop, physical locations and any other channel used. Note what the business manages and what each third-party provider handles, without assuming outsourcing removes all related responsibilities.
FROM KNOWLEDGE TO PRACTICE
Better questions. Better-informed technology decisions.
We bring together starting points for the conversations that come before a project. Explore AI, cloud migration and security, and connect what you learn with your organisation's next steps.
Explore the guidesIN PRACTICE
Three ways to get started.
02
Providers and integration
Gather available documentation and describe how the provider connects to the application.
03
Validation requirements
Clarify with the competent parties which assessment process is required for the specific business.
USEFUL ANSWERS
Frequently asked questions
Let's answer the first questions.
Is the guide enough to finalise the scope?
No. It is a preparation tool. Determining scope requires assessment of the actual flow and relevant requirements.
Where can I find the official requirements?
At the PCI Security Standards Council and in the documentation corresponding to the applicable assessment process.
LET’S MOVE FORWARD.
Discuss your initial PCI DSS review
Describe your environment and objective. We will start with what matters to your project.