Protection Group International Limited

PCI-DSS QSA Consultancy

PGI can support your PCI compliance journey by providing experienced Qualified Security Assessors (QSA) to help you along the way. Our service is split in to four areas providing a turnkey solution for PCI-DSS compliance.
The four areas are:
Compliance Advice
Gap Analysis
Testing and Maintenance
PCI Reporting


  • Compliance scope validation and scope reduction review
  • Advice on best practice solutions
  • Information risk assessments
  • PCI DSS Awareness and Training
  • Gap analysis between your organisation and the Standard
  • Document creation (policies and procedures) where required
  • Internal vulnerability assessment and all aspects of penetration testing
  • Report completion (SAQ, ROC and AOC)
  • Assistance throughout the compliance journey and beyond
  • Quarterly compliance reviews


  • Assistance from experienced and knowledgeable PCI DSS accredited practitioners
  • Understand your compliance scope and requirements
  • Prioritise outstanding activities through gap analysis and risk assessments
  • Rationalise and improve your cardholder data environment security posture
  • Proactively achieve and maintain compliance through our range of services
  • Compliance reports signed by a QSA authority


£850 to £900 per person per day

  • Education pricing available

Service documents

G-Cloud 11


Protection Group International Limited

Helen Jones

01454 451827


Planning service Yes
How the planning service works We would work closely with our clients to understand their requirements, then develop a programme that meets their needs in an appropriate timescale.
Planning service works with specific services No


Training service provided Yes
How the training service works PGI’s Information Assurance Team is able to deliver expert training and coaching relating to applicable policies and processes to staff responsible for PCI related services within an organisation. Our experienced team includes qualified QSAs who will be able to provide real-life scenarios to illustrate requirements, providing pragmatic advice and guidance based on many years of working in many organisations and sectors including government, corporate, charity and small-to-medium enterprises.
Training is tied to specific services No

Setup and migration

Setup and migration
Setup or migration service available Yes
How the setup or migration service works PGI would work with our clients to understand their requirements and to help them determine the most appropriate location for the services they wish to provide. These could be hosted on premise or elsewhere, and PGI will work with the client to ensure that all appropriate security measures are considered.
Setup or migration service is for specific cloud services No

Quality assurance and performance testing

Quality assurance and performance testing
Quality assurance and performance testing service Yes
How the quality assurance and performance testing works In a similar manner to Business Continuity and Incident Response testing, PGI would work with the client to test and refine the various process related to PCI DSS, including testing of technical solutions. This will give the client confidence that their procedures are practical, fit for purpose, and that their employees know what is expected of them.

Security testing

Security testing
Security services Yes
Security services type
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
Certified security testers Yes
Security testing certifications
  • Tigerscheme

Ongoing support

Ongoing support
Ongoing support service Yes
Types of service supported Hosting or software provided by a third-party organisation
How the support service works PGI can offer a ‘QSA as a Service’ option, and the ‘Quarterly compliance reviews’ service which we provide includes an ongoing, regular check.

Service scope

Service scope
Service constraints PGI have no constraints on the services we provide. Work can be carried out on site or remotely, depending on client requirements.

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Responses will normally be within one working day, unless in the middle of an incident / project when response times will usually be quicker. Weekend response times may be different, depending on contractual requirements.
User can manage status and priority of support tickets No
Phone support Yes
Phone support availability 9 to 5 (UK time), Monday to Friday
Web chat support No
Support levels Support levels would be agreed on a project by project basis. Cost for support will be determined based on client requirements. Typically each client will be assigned a lead contact, who may be one of PGI's consultants or may be part of the sales team. This will depend on the nature of the project being undertaken.


Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Developed Vetting (DV)


Price £850 to £900 per person per day
Discount for educational organisations Yes

Service documents

pdf document: Pricing document pdf document: Service definition document pdf document: Terms and conditions
Service documents
Return to top ↑