Protection Group International Limited

PCI-DSS QSA Consultancy

PGI can support your PCI compliance journey by providing experienced Qualified Security Assessors (QSA) to help you along the way. Our service is split in to four areas providing a turnkey solution for PCI-DSS compliance.
The four areas are:
Compliance Advice
Gap Analysis
Testing and Maintenance
PCI Reporting

Features

  • Compliance scope validation and scope reduction review
  • Advice on best practice solutions
  • Information risk assessments
  • PCI DSS Awareness and Training
  • Gap analysis between your organisation and the Standard
  • Document creation (policies and procedures) where required
  • Internal vulnerability assessment and all aspects of penetration testing
  • Report completion (SAQ, ROC and AOC)
  • Assistance throughout the compliance journey and beyond
  • Quarterly compliance reviews

Benefits

  • Assistance from experienced and knowledgeable PCI DSS accredited practitioners
  • Understand your compliance scope and requirements
  • Prioritise outstanding activities through gap analysis and risk assessments
  • Rationalise and improve your cardholder data environment security posture
  • Proactively achieve and maintain compliance through our range of services
  • Compliance reports signed by a QSA authority

Pricing

£850 to £900 per person per day

  • Education pricing available

Service documents

Framework

G-Cloud 11

Service ID

8 6 7 9 4 6 0 1 4 9 2 6 6 4 3

Contact

Protection Group International Limited

Rebecca Preece

0845 600 4403

customerservices@pgitl.com

Planning

Planning service
Yes
How the planning service works
We would work closely with our clients to understand their requirements, then develop a programme that meets their needs in an appropriate timescale.
Planning service works with specific services
No

Training

Training service provided
Yes
How the training service works
PGI’s Information Assurance Team is able to deliver expert training and coaching relating to applicable policies and processes to staff responsible for PCI related services within an organisation. Our experienced team includes qualified QSAs who will be able to provide real-life scenarios to illustrate requirements, providing pragmatic advice and guidance based on many years of working in many organisations and sectors including government, corporate, charity and small-to-medium enterprises.
Training is tied to specific services
No

Setup and migration

Setup or migration service available
Yes
How the setup or migration service works
PGI would work with our clients to understand their requirements and to help them determine the most appropriate location for the services they wish to provide. These could be hosted on premise or elsewhere, and PGI will work with the client to ensure that all appropriate security measures are considered.
Setup or migration service is for specific cloud services
No

Quality assurance and performance testing

Quality assurance and performance testing service
Yes
How the quality assurance and performance testing works
In a similar manner to Business Continuity and Incident Response testing, PGI would work with the client to test and refine the various process related to PCI DSS, including testing of technical solutions. This will give the client confidence that their procedures are practical, fit for purpose, and that their employees know what is expected of them.

Security testing

Security services
Yes
Security services type
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
Certified security testers
Yes
Security testing certifications
  • CREST
  • Tigerscheme

Ongoing support

Ongoing support service
Yes
Types of service supported
Hosting or software provided by a third-party organisation
How the support service works
PGI can offer a ‘QSA as a Service’ option, and the ‘Quarterly compliance reviews’ service which we provide includes an ongoing, regular check.

Service scope

Service constraints
PGI have no constraints on the services we provide. Work can be carried out on site or remotely, depending on client requirements.

User support

Email or online ticketing support
Email or online ticketing
Support response times
Responses will normally be within one working day, unless in the middle of an incident / project when response times will usually be quicker. Weekend response times may be different, depending on contractual requirements.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Support levels
Support levels would be agreed on a project by project basis. Cost for support will be determined based on client requirements. Typically each client will be assigned a lead contact, who may be one of PGI's consultants or may be part of the sales team. This will depend on the nature of the project being undertaken.

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Pricing

Price
£850 to £900 per person per day
Discount for educational organisations
Yes

Service documents

Return to top ↑