PCI compliance made easy and effective

Compliance with the Payment Card Industry (PCI) Data Security Standards requires completion and submission of the Self-Assessment Questionnaire (SAQ) and quarterly external network scans. With 4 different schedules of validation spanning 220+ questions, accurately completing the SAQ can be a frustrating experience. Whether you're just implementing your PCI program or have an on-going, mature initiative in place, Coalfire's Rapid SAQ cost-effectively guides PCI compliance.

Rapid SAQ is built within Coalfire's Navis customer portal. Navis incorporates an intelligent knowledge engine that prepares the most relevant PCI Data Security Standard (DSS) control questions for your organization, based on your input to a series of process and technology related questions. Rapid SAQ helps you comply with PCI through a managed process that:

• Automatically determines your SAQ Validation Type, DSS control questions, and the correct SAQ forms
• Documents and manages the challenging aspects of PCI Compliance, like remediation planning and compensating controls
• Consolidates multiple SAQs or independent cardholder data environments into a single questionnaire
• Guides your understanding of the PCI DSS concepts, terminology and requirements that drive the SAQ
• Manages remediation activities
• Gives ready access to QSA's for specific guidance, clarification, and support

Self Service Rapid SAQ

Retail price: $395 per year

The SAQ is completed through automated tools and online services.  Users of Rapid SAQ can purchase, document, and generate their PCI self assessment questionnaire (SAQ) entirely independent of Coalfire’s PCI auditors.  Users of this option that subsequently want live auditor assistance can select the “Facilitated” offering anytime prior to final submission.

Facilitated Rapid SAQ

Retail price: $2,245 per year

All of the functions of the Rapid SAQ, with additional “facilitated” support time from a QSA.  Facilitated audit service support is provided in blocks of 5 hours and can be used to help clarify question content, understand the applicability of controls to the customer’s environment, evaluate and test the strength of controls within their environment and other SAQ related control tasks.