PCI Compliance

---

White Castle Tech's PCI Readiness Assessment

• Step 1: Assessment

  White Castle starts with learning. An in-depth review of your existing infrastructure, applications and policies. We target the items relevant to the PCI Data Security Standard (PCI DSS) that apply to the individual organization.

  Services Include:

  • Target Scanning: identifying potential targets in your organization
  • Exhaustive Port Scanning: identify each target and the services linked to it
  • Vulnerability Assessment: find vulnerabilities by scanning of targeted hosts
  • Application Scanning: identify vulnerabilities on an application level
  • Penetration Testing: automated and manual penetration tests
  • Policy Review: review policies and procedures & connect the dots between vulnerabilities

  Phone interviews and on-site physical inspections & validation are used at various parts of the assessment step.

• Step 2: Gap Analysis

  Gaps happen: that’s why we do assessments in the first place! White Castle works with our customer to prioritize the findings reported in the assessment phase, and most importantly, develop a remediation strategy to pass the PCI audit.

  Services Include:

  • Reviewing the readiness report documenting assessment findings
  • Strategizing a complete remediation plan, with numerous projects to address vulnerabilities.
  • Craft a detailed project roadmap, with milestones, deliverables, and security outcomes

• Step 3: Remediation

  Remediation is where your organization becomes a PCI-compliant fortress. All the security improvements identified in the gap analysis are prioritized and addressed, based on the needs, capabilities, and timeframes of your organization.

  This Step Includes:

  • Device configuration
  • Design and deploy updated systems & test the security outcomes
  • Collaboratively develop new systems, policies, procedures and controls
  • Training for in-house staff responsible on new or updated policies and procedures
  • Process validation, and finally documenting step-by-step instructions for info security

• Step 4: PCI DSS Audit Certification & Ongoing Support

  White Castle Tech boasts an in-house compliance team, which offers full support during the PCI compliance process, from self-assessments to coordinating activities with an independent PCI auditor.

  White Castle Tech partners with QSA firms, and collaboratively, we’ll guide you through the final PCI audit process, providing all the necessary information and documentation to not just meet PCI Security standards once, but keep your company compliant going forward.

  This Step Includes:

  • Verification of PCI compliance pertaining to the standards/regulations
  • Full support for formal reports & questionnaires
  • Testing & validation of controls
  • Validation of required vulnerability scan results
  • Documentation Submission
  • Certification of audit report
  • Acting as your advocate to resolve any questions from auditing personnel

  Plus, Ongoing Support:

  • Annual on-site audit of security systems and procedures
  • Periodic review of networks, as needed.
  • On-demand assessment of specific network components for security posture
  • Quarterly vulnerability scans
  • Regular monitoring & analysis of network devices for breaches
  • Periodic review of access, management, and data encryption
  • Incident support, including log monitoring and forensics