In the first phase, we began with a Diagnostics phase which comprised of certain activities such as scoping assessment whereby we consulted with the personnel to understand the business and technical operations that required compliance to the standard; we then proceeded to conduct a gap assessment on the defined areas. (The gap assessment would seek to determine the compliance level of your documentation, processes, and information technology infrastructure to the PCI-DSS standard).

We then moved to the last activity whereby we developed a blueprint that stated the steps required to close the identified gaps as well as improve the client’s security posture.

In the second phase, Implementation & Remediation Management, we proceeded to provide support and guidance in the implementation of applicable PCI-DSS controls.

Finally, the compliance assessment was conducted by our team of certified Qualified Security Assessors (QSA) and the successful evidence of compliance was delivered.