Securing success

Achieving PCI DSS certifications for a major portuguese financial institution and merchants

IMPLEMENTED SOLUTIONS

GRC

  • Scoope analysis
  • Gap analysis
  • Remediation plan

RTS

  • Penetration tests
  • External scans
  • Internal scans
  • ASV scan
  • Wi-Fi test
  • Segmentation test 

LOCATION

Portugal


SECTOR

Finance

Certification success of a premier portuguese financial institution


A Portuguese financial institution faced significant challenges in obtaining specific certifications within a complex and chaotic environment. By implementing Governance, Risk, and Compliance (GRC) and Regulatory Technical Standards (RTS) activities, the institution successfully acquired all the necessary certifications. This strategic approach not only facilitated certification but also transformed the organization, resulting in a smoother and more structured operational system.

What we achieved

The challenge

A large Portuguese financial institution encountered significant challenges in obtaining critical certifications. These included the Payment Card Industry Data Security Standard (PCI DSS) certification for a major bank in Portugal, as well as the PCI DSS certification for over 30 merchants affiliated with the institution.

The solution

Given the size and complexity of the organization, these challenges were addressed through the implementation of various GRC and RTS activities, such as Scope and Gap Analysis, Remediation Plan (GRC), and Penetration Tests, External and Internal Scans, ASV Scan, Wi-Fi test, and Segmentation Test (RTS).

The benefits

After ensuring compliance with regulatory requirements and evaluating cyber defenses, the institution succeeded in obtaining the first PCI DSS certification for the major bank in Portugal. This achievement involved delivering a Report on Compliance (RoC) and Attestation of Compliance (AoC). Additionally, the organization obtained PCI DSS certification for more than 30 merchants. The process also revealed RTS opportunities related to testing and scanning (cross-selling) and initiated a long-term project, enhancing the company's reputation in the market.

Do you want your company to be a success story too?

Explore how we can transform your business into a more profitable and efficient enterprise using our best solutions.