Payment Card Industry Data Security Standard

The PCI 3DS Core Security Standard is a security standard created by The Payment Card Industry Security Standards Council (PCI SSC) to provide a framework for security controls that support the EMV® 3-D Secure (3DS) transaction process. The standard is intended for those companies that manage or provide EMV® 3DS components, specifically: ACS, DS, and 3DSS.

Teamwork IMS has been qualified by the PCI SSC as a PCI 3DS Assessor to perform PCI 3DS assessments.

Our team of PCI DSS Consultants deliver PCI DSS Gap Analysis, Compliance Programme Management, provides expert technical advice and guidance on information security compliance issues and provides Implementation assistance as well as assessing compliance against PCI DSS using our QSA qualified resources. This may involve the production of a Report of Compliance (ROC) along with the necessary Attestation of Compliance (AOC). In some cases, we may assist customers in producing their Self Assessment Questionnaires (SAQs).

Our PCI DSS consultants work with you on the scope and segmentation of your PCI DSS environment to minimise the cost and effort needed for compliance whilst delivering the functionality you need. Similarly, if sampling is required, we can ensure costs are minimised whilst the audit process remains effective.

Our consultants will review the organisation’s current status against PCI DSS to identify to what extent existing controls, policies and business processes are effectively implemented and what gaps are present and need to be addressed. A detailed report identifies clearly what needs to be done and by whom, with appropriate timescales and recommendations for resources.

Following Gap Analysis, we will prepare a list of actions to be taken. Once these are agreed, we project manage the entire compliance programme for you, driving the implementation programme activities to ensure successful outcomes. This includes working with you, providing expert technical advice and guidance on information security management issues, producing key deliverables such as new policies, procedures or the implementation or configuration of necessary technology.

Our team of PCI DSS Consultants deliver PCI DSS Gap Analysis, Compliance Programme Management, provide expert technical advice and guidance on information security compliance issues and provide Implementation assistance as well as assessing compliance against PCI DSS using our QSA qualified resources. This may involve the production of a Report of Compliance (ROC) along with the necessary Attestation of Compliance (AOC). In some cases we may assist customers in producing their Self Assessment Questionnaires (SAQs).

Our PCI DSS consultants work with you on the scope and segmentation of your PCI DSS environment to minimise the cost and effort needed for compliance whilst delivering the functionality you need. Similarly, if sampling is needed, we can ensure costs are minimised whilst the audit process remains effective.

Teamwork QSAs will carry out compliance audits (and pre-audits) to produce Reports on Compliance (ROCs) or Self Assessment Questionnaires (SAQs) and to complete the necessary Attestation of Compliance (AOC). Where non-compliances are identified, Teamwork will assist with remedial action planning as necessary to help you to achieve a compliant status in the most straightforward way possible