PCI Compliance Assessment &
Report on Compliance (ROC)
Compliance with the PCI DSS is a requirement for any organization that stores, processes, or transmits cardholder data. Designed to protect your business and customers against card theft and fraud, the standard is a collection of principles accompanied by more than 300 controls around which the elements are organized:
Build and Maintain a Secure Network
Protect Cardholder Data
Maintain a Vulnerability Management Program
Implement Strong Access Control Measures
Regularly Monitor and Test Networks
Maintain and Information Security Policy
For campus-based organizations that may have multiple card acceptance methods, independent payment systems, and networks across the enterprise - complying with the standard can be fraught with confusion and anxiety. CampusGuard’s Assessment and Report on Compliance (ROC) services provide the expertise and assistance to overcome the challenges presented by the PCI DSS.
PCI DSS Assessments are provided by a dedicated Customer Advocate Team that includes Qualified Security Assessors (QSA) and Customer Relationship Managers (CRM) that have the PCIP accreditation from the PCI Security Standards Council. Your dedicated Customer Advocate Team is fully up-to-date on all aspects of the PCI DSS and the latest trends and have completed multitudes of PCI assessments within campus-based organizations. While on-site with your team, the CampusGuard QSA assesses your organizational and departmental policies, procedures, practices and controls against the standard and produce a thorough Report on Findings that accurately presents any areas that require remediation and recommended actions to attain compliance. Additionally, our Annual Support program continues the relationship after an assessment providing guidance and ongoing support. Our team consults with yours when they have questions, provides guidance regarding the intent of compliance controls, and provides advice for remediating any flaws in your cardholder data environment. Further, the CampusGuard Customer Compliance Portal is designed specifically for campus-based organizations giving you the tools needed to report, track, and document your PCI compliance across multiple campuses, divisions, and departments. All Self-Assessment Questionnaires (SAQs) are integrated into the portal including the Attestation of Compliance (AOC) to be submitted to your merchant bank and/or card processor.
Report on Compliance
Your organization may be required to attest compliance via a Report on Compliance (ROC). As a fully certified PCI DSS Qualified Security Assessor Company (QSAC) CampusGuard provides a complete audit solution that demonstrates your organization’s complete compliance with the PCI DSS. Often referred to as a Level 1 Assessment, we employ a methodology that includes interviews with personnel, configuration and document reviews and other evidence gathering that confirms that every aspect of cardholder data is protected and that your customers can be assured that their information entrusted to you is safe. Upon completion of the audit and confirmation that all controls are in place, CampusGuard produces and submits the ROC to the PCI Security Standards Council on your behalf.