PCI DSS Certification & Audit Services in Assam

Yes. Our team delivers PCI DSS gap analysis, implementation, internal audit and certification audit support for organisations in Assam and across Assam, with on-site visits to Guwahati, Silchar and Dibrugarh and remote delivery where it suits.

Timelines depend on scope, size and current maturity. After a gap assessment we give a fixed plan; most Assam engagements follow the same phased approach: assess, implement, internal audit, then certification or attestation.

We work with tea, oil and gas, bamboo and agro-processing and tourism in Assam, plus organisations in other sectors that need PCI DSS for customer or regulatory requirements.

Yes. Card brands (Visa, Mastercard, RuPay via NPCI) mandate PCI DSS compliance for all merchants and service providers handling card data. The Reserve Bank of India's guidelines on payment system security also align with PCI DSS requirements.

SAQ (Self-Assessment Questionnaire) is for smaller merchants and service providers. ROC (Report on Compliance) is required for Level 1 merchants and large service providers and must be completed by a Qualified Security Assessor (QSA). We support both.

They cover: (1) Install network security controls; (2) Apply secure configurations; (3) Protect stored account data; (4) Protect cardholder data in transit; (5) Protect against malicious software; (6) Develop and maintain secure systems; (7) Restrict access by business need; (8) Identify users and authenticate access; (9) Restrict physical access; (10) Log and monitor access; (11) Test security systems; (12) Support information security with organizational policies.