Onsite Assessment Overview

Whether it's to secure your customers' card data, help your business grow, comply with PCI requirements or mandates from your sponsoring bank, you recognize the need for PCI compliance.
What is a PCI Onsite Assessment?
The Payment Card Industry (PCI) requires high-volume merchants and service providers that store, process, or transmit credit card data to have a detailed security assessment by a PCI SSC certified Qualified Security Assessor (QSA). The purpose of the assessment is to validate in person that the merchant or service provider is handling card data in accordance with the Payment Card Industry Data Security Standards (PCI DSS).

Is it Required?
If you are a high-volume merchant or service provider, you are required to be assessed by a Qualified Security Assessor (QSA) annually. The definition of high-level varies depending on the Card Brands you accept. Fines and deadlines for non-compliance vary depending on your Acquiring Bank.

How Do I Engage SecurityMetrics?
If you wish to obtain a price quote for a PCI onsite audit please contact a SecurityMetrics Strategic Accounts representative at (801) 705-5656. They will send you a short questionnaire for a custom price quote that will cost effectively meet your needs and budget.

"After dealing with a number of QSA auditors, we found SecurityMetrics offered the most helpful and practical PCI advisement. We are delighted to work with them as we continue to strengthen our PCI environment."

- JetBlue Airways


Why Choose SecurityMetrics?
SecurityMetrics differentiates itself from other QSAs by providing PCI onsite assessments that enable you to benefit from the following:
  • A commitment to take the time to understand your operations and processes, enabling SecurityMetrics to accurately scope the cost and effort of the assessment
  • Trusted leadership and experience as a full service PCI compliance partner
  • Simple, straightforward pricing with no hidden charges or add-on fees
  • Recommendations from sponsoring or acquiring banks
  • Assurance that when you have questions or support issues you can talk to a live person, not an answering machine or e-mail queue