Skip to content
Ashcroft Payment Security
Read this first. Only a Qualified Security Assessor (QSA) can perform a formal PCI DSS assessment. We are not a QSA, so we prepare and remediate. We also introduce an independent QSA when needed.

Guides

PCI DSS guides in plain English

These PCI DSS guides explain what your bank's letter means, which form applies and what it really costs. So each one answers a single question without jargon.

PCI DSS guides: requirements, forms and the assessment

How to use these PCI DSS guides

Start with the requirements and version 4.0.1. Then find your form. Finally, read the cost and assessment guides.

We are not a QSA. So these guides explain preparation, while a qualified assessor performs any formal assessment.

PCI DSS guides to the standard

The rules themselves. Start here.

Self-assessment forms

Which questionnaire fits. Also how to shrink it.

PCI DSS guides to reports and scans

Who signs what. And what it costs.

Specific requirements

Areas where businesses often fail.

PCI DSS guides to specific requirements

Single requirements explained. Each shows the evidence a QSA samples. Also, each lists the gaps we see most.

PCI DSS guides to more SAQ types and standards

The shorter questionnaires come first. Then the neighbouring PCI standards. So you can rule each one in or out.

Ready for a real number?

Answer five questions and receive a written estimate. No call is needed.

Get my written estimate