Max does PCI

The Challenge

Merchants and service providers that process or support payment card transactions are obliged to comply with the PCI DSS, which at its fullest extent, requires an organization to comply with over 250 security controls. Those security controls include nearly 60 daily, weekly, monthly, quarterly, bi-annual, annual, and point-in-time actions, as well as over 400 assessment testing procedures. PCI compliance is a never-ending process of review, action, and reflection culminating with an annual assessment to ensure that your organization has maintained year-round compliance. As with all compliance programs, there are many challenges organizations face, including:

• Maintaining central visibility of the compliance program status;
• Breadth of DSS requirements makes it difficult to coordinate mandatory activities across multiple
  teams;
• Making complex decisions without the assurance of expert opinions;
• Limited ability to track and monitor areas of non-compliance;
• Managing the need for a broad array of specialist roles and capabilities, with peaks and troughs in
  demand, on finite budgets;
• Manage ongoing gathering of required evidence throughout the year.