What is PCI DSS?
The Payment Card Industry Data Security Standard (PCI DSS) applies to any organisation that stores, processes, or transmits cardholder data. Version 4.0.1 is the current standard, with a risk-based, outcomes-focused control set.
CyberAlpha scopes your cardholder-data environment, runs the gap and readiness assessment, performs segmentation and penetration testing, supports the right SAQ or ROC path, and drives remediation to closure.
Why PCI DSS?
Our Engagement Process
What You Get
Who Needs It
Merchants, payment service providers, fintechs, and any business touching cardholder data at Levels 1–4.
See related servicesReady to get PCI DSS done?
Talk to a specialist about scope, timeline, and a fixed proposal.
Talk to an ExpertFrequently Asked Questions
Which SAQ applies to us?
It depends on how you accept and handle card data. We assess your environment and confirm the correct SAQ type (A, A-EP, B, B-IP, C, C-VT, D, P2PE) or whether a full ROC is required.
Do you provide penetration testing for PCI?
Yes — PCI DSS requires internal and external penetration testing and segmentation testing, which we deliver as part of the programme.
Is this v4.0?
We work to PCI DSS v4.0.1, the current version, including the newer requirements that are now mandatory.