The recent shift to relying heavily on remote working can introduce significant risks for PCI-compliant organizations.
Our service assesses your remote working policies, processes, and technology to advise how your homeworking solution fits within the PCI DSS control framework, focusing on:
This service is conducted remotely, during which the consultant collects information about your organization and its remote working arrangements. This information will be compared to your organization’s information security and data protection requirements, and against best practice.
The consultant will address each of the key PCI DSS requirements that remote working can affect.
The result is a high-level report and remote working action plan that identify key findings relative to specific PCI DSS controls.
The report will identify in detail the extent to which your organization’s remote working activities meet its information security and data protection requirements, while the action plan prioritizes the key issues your organization must address to meet those requirements.
This service applies to any organization that is PCI DSS compliant or is looking to achieve compliance in the immediate future.
You will need to provide overviews of your people, processes, and technology to proceed on schedule and fulfill the objectives. Our consultants rely on the information you provide to give you the most prudent advice relative to your organization’s environment.
While not essential, IT Governance USA recommends appointing an internal project coordinator to host meetings and to ensure all required information is provided on time.