PCI PIN/PED Review

PSC assists clients to prepare for a PCI PIN Audit with a PCI approved laboratory. This includes:

• Advice on the design of the PED to meet PCI standards (PCI approved laboratories are not allowed to advise PED vendors)
• Advice on key management and cryptography
• Assistance with obtaining EMV1
• Assistance in choosing an approved laboratory

PSC can prepare all the required documentation directly related to the PED and other documentation required by the laboratory and PCI. This includes:

• PCI PIN Entry Device Security Requirements forms  
• PCI PIN Entry Device Evaluation Vendor Questionnaire
• The necessary hardware and software accessories to perform simulated PCI payment transactions
• Documentation that describes all functions used for data input and out
• Development of documentation that relates to the “process, which can be audited,” including:
  
  • Software quality procedures
  • Documentation and software control procedures
  • Change forms
  • Change control logs
  • Change records
• Instructions and accessories (such as key loaders)
• Additional documentation—such as block diagrams, schematics, etc.

PSC can provide additional consulting support for any issues that arise during testing and ongoing compliance.