Our client RNIB needed support when delivering their PCI DSS project, they reached out to A4S Cloud Solutions knowing they have a background in the support of delivering various certifications for their clients and have wealth of knowledge in the area of IT security and related technology solutions such as firewall, anti-virus, disk encryption and more.
A4S worked with the client to implement strict controls against the third party delivered PCI DSS audit report, it was essential to ensure the report recommendations and associated outcomes were fully understood.
Following a detailed review of the report; A4S uploaded the entire report into the A4S project management portal and provided each RNIB stakeholder with access to review, contribute and collaborate with other RNIB staff and also the third party report writer.
Each PCI DSS recommendation was reviewed in detail as a group, and an agreed output was assigned to stakeholders such as a process, policy or a technical solution.
Each output from the PCI DSS recommendations report was prioritised based on criticality and benefit to the activity, a high level schedule was assigned to manage timescales.
Management reporting was provided through the A4S project management portal which would give the project board a detailed insight into progress, risks and issues.
Some of the many benefits of the A4S project management portal used during this project included:
The initial requirement from RNIB was to bring rigour and control to the project, subsequently this organised progress forward being made. Each stakeholder was able to channel their communications through the A4S project management portal which ensured a centralised record was held, all deliverable artefacts were stored centrally for internal and third party review.
The A4S project management portal is an online solution that gives all stakeholders secure access to their projects, the portal shows all data in realtime for each stakeholder, A4S prefer to utilise this method for transparency and teamwork, it is something highly valued by our customers.
The client lead Aidan Forman Head of IT for RNIB was extremely grateful for the support provided by A4S Cloud Solutions at a time when it was most needed, we look forward to continuing to work with Aidan and RNIB!
“Jason and A4S Cloud Solutions were requested to provide us with much needed support to deliver our PCI DSS certification, we needed organisation and rigour applied to the review of the PCI DSS report, review and delivery of its recommendations, we found working with A4S an easy and enjoyable process, they brought control, rigour, reporting and prioritisation which was exactly as needed.”
“Their online project management platform enabled our team and third party suppliers to collaborate easily and effectively, we were granted as much access as needed for the duration of the project, we were able to monitor progress and budget, as well as identify any issues the team were facing so we could implement a quick resolution”
Aidan Forman, RNIB Head of IT
In conclusion, the partnership between Royal National Institute of Blind People (RNIB) and A4S Cloud Solutions exemplifies a successful collaboration aimed at achieving PCI DSS compliance.
By leveraging A4S’s expertise in project management and IT security, RNIB effectively centralised their PCI DSS project, ensuring rigorous controls and streamlined communication throughout. Through the utilisation of the A4S project management portal, stakeholders were provided with real-time access to project data, facilitating transparency and collaboration.
The implementation of strict controls against third-party audit reports and prioritisation of recommendations underscored the commitment to meeting compliance requirements. Moreover, the testimonial from Aidan Forman, RNIB’s Head of IT, underscores the satisfaction and value derived from A4S’s support.
Overall, this case study highlights the importance of robust project management and partnership in navigating complex compliance initiatives effectively.
PCI DSS (Payment Card Industry Data Security Standard) compliance is a set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment. It is important for organisations to achieve PCI DSS compliance to protect sensitive payment data, prevent data breaches, and avoid significant fines and penalties associated with non-compliance.
A4S Cloud Solutions helped RNIB streamline their PCI DSS compliance by providing a comprehensive PCI compliance solution. This included assessing RNIB’s existing infrastructure, identifying gaps in compliance, and implementing the necessary security measures to meet PCI DSS standards. A4S Cloud Solutions also provided ongoing support to ensure continuous compliance and security.
Implementing a PCI DSS compliance solution offers several key benefits, including enhanced security of payment card data, reduced risk of data breaches, improved customer trust, and avoidance of fines related to non-compliance. A robust PCI DSS solution also helps organisations streamline their compliance processes and ensure they meet all regulatory requirements.
Organisations face several challenges in achieving PCI DSS compliance, such as the complexity of the requirements, the need for ongoing monitoring and maintenance, and the costs associated with implementing the necessary security measures. Additionally, organisations must stay updated with the latest PCI DSS standards and ensure that all systems and processes are continuously compliant.
Organisations can benefit from a comprehensive PCI compliance solution by achieving and maintaining PCI DSS compliance more effectively. A robust solution includes thorough assessments, customised security measures, and continuous support to ensure compliance. This helps organisations manage their PCI DSS requirements efficiently, protect sensitive payment data, and reduce the risk of data breaches, ultimately enhancing customer trust and avoiding significant fines.
To see the wide range of projects we’ve worked on, click here to read other case studies.
