Services
PCI Boot CAMp
This is a 4 week engagement where we spend 4 weeks via online meetings to provide the following key deliverables:
Complete Gap Analysis
IT Security Risk Assessment - Detailed
Strategic Architecture Planning
De-scoping Consulting (By de-scoping areas of the business, companies can save an incredible amount of time and additional costs)
Process Planning
Process/Procedure Templates
Secure Storage Solutions for PCI Evidence
Project Schedule (Banks who are threatening to no longer allow you to process credit card want to see a plan to become PCI compliant)
SDLC Process
Coordinate Developer Training
Provide all scheduled compliance action items for current year and future
Coordinate with QSA for assessment process
Communicate with Banks/Credit Card Companies
Vendor Management
Interview Prep - QSA Assessment
Compliance Governance
Why hire a full-time PCI Compliance resource? We can be your on-demand compliance governance provider. We make sure each year's assessment is completely turnkey. Compliance Governance Deliverables include:
Tracking of all PCI DSS Monthly, Quarterly and Yearly Action Items
Facilitate Meetings and provide minutes for PCI Compliance (Mandatory Action Items)
Alert you of any new rules or regulations
Coordinate each year's PCI Assessment
Provide guidance on any security concerns
PCI Project Management
After the PCI Boot Camp, we can stay on and make sure the project gets done. This can be done with 5 hours a week for the duration of the project. We can also be onsite during the QSA Assessment Interviews and ensure you have all the backing needed. Here are some of the deliverables we provide:
Project Meetings
Project Schedule
Weekly Status Reports
Vendor Management
Team Management
Budgeting
Coordination of remediation testing
Interview Prep - QSA Assessment
Manage Secure Storage Documents
Executive Project Management
XPM can provide special consulting to create an effective Program Management Office. If you need to get a handle on how to manage more and more projects with the same amount of staff, your not alone. We have several templates to help you rank and prioritize projects and effectively only work on projects with high ROI (Return on Investment) and are aligned with the company's strategic goals.
Many companies think that a PMO will manage the projects and provide data, but the main goal of our PMO model is the stop wasting time on projects that are not the most important projects that help the company grow in revenue and accomplish executive goals.
We can provide a framework and even design a custom project management methodology for your specific needs. Every project is different, so we don't believe in putting everything into one methodology. The framework provides projects avenues to proceed in the most efficient manner.
Cyber Security Services
Click on S at the top