PCI DSS Self-Assessment Questionnaire (SAQ)

About the service

The Payment Card Industry Data Security Standard (PCI DSS) is a framework comprising over 250 controls—both technical and administrative—designed to protect customers' financial data. It is a clear and specific standard that not only outlines security guidelines but also defines concrete objectives and verification methods. We help organizations complete PCI DSS assessments while advising them on achieving and maintaining security best practices, particularly for processes and systems related to card-based payments. PCI DSS compliance must be revalidated annually. Together with the client, we define the processes and controls that need to be established or strengthened to maintain compliance as part of their regular (business-as-usual) operations.

Scope and deliverables

• Assists in analyzing the context of the requirement

• Helps define the scope of the assessment in terms of people, processes, and systems

• Helps determine applicable and non-applicable controls

• Helps determine the appropriate SAQ type (there are 9)

• Deliverable 1: Self-Assessment Questionnaire (SAQ)

• Deliverable 2: Attestation of Compliance (AoC)

Why Assertiva S.A.

At Assertiva S.A., we have a highly qualified team of engineers, consultants, and architects specializing in information security and cybersecurity. Our approach enables us to support organizations through diagnosis, consulting, training, design, planning, implementation, and the continuous improvement of both technological and non-technological solutions. Each project is tailored to the organization's specific needs and executed using a comprehensive, professional methodology aligned with best practices.