True is a PCI Qualified Security Assessor (QSA) Company
TRUE provides the following PCI services to help you become compliant and maintain compliance:
What makes PCI so complex is that it impacts each organization differently. Misunderstanding this impact is all too common. The real value we bring to our clients is determining and explaining exactly how the PCI DSS applies to your specific organization. Often companies make assumptions about how to achieve compliance and spend more time and money than necessary and still fail to meet the intent of the standard.
We offer on-site assessment and remediation services to assist Level 1 and Level 2 merchants and service providers in meeting annual validation of requirements dictated by the PCI DSS. Our assessment will validate your organization’s adherence to the 12 PCI DSS requirements and provide you with an official Report on Compliance (ROC), detailing your compliance status with the PCI DSS. We can also assist you with completing your Self Assessment Questionnaire (SAQ).
In our PCI Gap Assessment, we review all pertinent PCI DSS requirements and applicable security program elements in order to identify gaps in processes, actions or states. Identified gaps will be aggregated into a PCI Gap Analysis report. This report will outline all deficiencies that must be addressed in order to achieve and maintain regulatory compliance.
We also offer “QSA for a Day” consulting services to help your organization develop an initial strategy to tackling PCI compliance. We can help guide you through all necessary steps to achieve and maintain the level of PCI compliance your business needs.
With our External PCI ASV Scanning Service, merchants receive up to four rounds of ASV scans annually. Each round includes as many remediation scans as needed to achieve a passing ASV compliance report within a seventy-five (75) day window. We supply an official ASV Scanning Report each quarter, providing evidence that your scans were completed in compliance with PCI. Managed Scanning is also available for organizations that wish to perform additional scanning upon request with raw technical scan results provided.