If your business sells and collects card payments online, then customers and banks need to know you take cyber security seriously. IT Empathy Limited helps our clients obtain official Payment Card Industry (PCI) ASV Scan Report Attestation of Scan Compliance certificates.

Process

1. First website external IP scan is free for a new customer.

2. The customer is provided with a Vulnerability scan report to highlight what issues need remediation to gain compliance. Customers can then choose what path is best to fix the security issues. Remediation activities may require paid services to resolve.

3. Rescanning is required to gain an official certificate (paid service) for each public IP address in scope. Typically, a website will have 1 IP address. Please note some specialist services may use more than 1 IP address. PCI certificates last for 90 days and typically are performed each quarter. As per PCI DSS requirement 11.2.2 and the ASV Program Guide.