FFIEC News

nCircle Certified PCI Scan Service Supports New Version of Self-Assessment Questionnaire for PCI Compliance

(June 06, 2008)-- nCircle, provider of agentless security risk and compliance management solutions,  announced the inclusion of the newest version of the Self-Assessment Questionnaire (SAQ), version 1.1, into the nCircle Certified PCI Scan Service -- the industry's most accurate and comprehensive PCI scan service. The new SAQ allows merchants and service providers of all sizes to complete the most appropriate version of the questionnaire based on their business model. nCircle's user-friendly implementation of the new SAQ enables users to complete the questionnaire online using the nCircle Certified PCI Scan Service and electronically submit it to their acquiring banks.

The SAQ is a validation tool designed to help merchants and service providers demonstrate compliance with the Payment Card Industry Data Security Standard (PCI DSS). The questionnaire was initially introduced in 2006 by the PCI Security Standards Council -- the body that governs the PCI DSS -- and was recently updated. The new release contains four different variations (SAQ A, B, C, D) that address specific merchant business scenarios, making it simple for merchants to complete the appropriate form for submission.

-- SAQ A is for merchants who have outsourced all processing, transmission and storage of cardholder data
-- SAQ B is for merchants who process cardholder data via imprint machines or standalone dial-up terminals only
-- SAQ C is for merchants whose payment applications systems are connected to the Internet
-- SAQ D is for merchants that do not fall under any of the above and for service providers who have been asked to submit the SAQ

All SAQ submissions after April 30, 2008 must be completed using the new version.

"The new version of the Self Assessment Questionnaire provides merchant- specific versions to help streamline the annual compliance certification process and quickly identify areas of non-compliance on the payment network," said Mark Wood, Vice President of Product Management at nCircle. "Combining the levels of automation and accuracy provided by our scan service with efficiencies granted by the new SAQ, our customers enjoy the highest possible levels of PCI compliance and security."

Share or bookmarklet this web page at: