Retail

Nettitude has been heavily involved in the Payment Card Industry Data Security Standard (PCI DSS) since its inception in 2006. Nettitude is both a PCI Approved Scanning Vendor (ASV) and a PCI Qualified Security Assessor (QSA). As a consequence, this requires our consultants to undertake constant training to stay abreast of changes in technology, changes in regulation and changes in the standard. Nettitude specializes in the following areas:

Traditional retailers with Point of Sales Terminals. Nettitude provides support and guidance for retailers, that are trying to define the scope of PCI DSS in these types of retail environments. Nettitude is highly experienced in working with P2PE and E2EE technologies to help mitigate risk in these types of environment.

Electronic retailers that are purely transacting online. Nettitude has strong infrastructure and web application experience, including penetration testing, code review and web application architecture. As a consequence, this provides our QSA with the background to stand out from the crowd, and really offer tangible advice and guidance for online retail clients.

Retailers that provide Mail Order Services. Nettitude has extensive experience working with mail order clients, and is familiar with the challenges in processing hard copy payment card details. Nettitude’s QSA consultants can offer advice and guidance on how retailers can adapt their policies, procedures and working practices to reduce the risk from these types of activities.

Nettitude specializes in helping retailers assess their PCI DSS scope. With a series of Retail based models, Nettitude is able to provide consistent scoping advice, that is quantifiable and easy to understand.

Nettitude’s approach to PCI DSS passes through a series of phases.

• Initially, Nettitude provides a GAP ANALYSIS
• This is the measurement of a retailers environment against what the PCI DSS standard requires
• Nettitude can help an organization define their policies and procedures as well as their technologies and working practices.
• Nettitude can provide ASV SERVICES, PENETRATION TESTING , and WEB APPLICATION TESTING
• Nettitude provides PRE AUDIT SERVICES, in readiness for the final audit
• Nettitude finally provides the FULL AUDIT and report on compliance