Policy and Procedures Development

In our experience as PCI DSS auditors we have found that organisations often have great difficulty getting to grips with the significant policy and procedural requirements of the PCI DSS standard. The majority of PCI DSS requirements expect organisations to have some form of documentation with requirement 12 being particularly demanding.

In general we find organisations dread two scenarios:

• Sitting down to the unenviable task of writing documentation from scratch
• Implementing the documentation into daily business practises by ensuring that employees have read and understood the new requirements.

For this reason Sysnet provide our clients with template Policies, Procedures and Standards to meet all PCI DSS requirements. We then work with you to make sure they meet your specific infrastructure requirements.

If required we can provide general and technical awareness training sessions so that your employees understand the reason this documentation is required and any new roles and responsibilities they might have.