PIN Security Audit

SecurityMetrics PCI PIN Audit helps you meet PCI PIN security requirements by guiding you through a consulting, pre-audit, and onsite phase. SecurityMetrics simplifies your PIN audit experience by assisting with remediation and submitting your final validation report for you.

The PIN program is required for companies involved in processing PIN transactions. Typically, this involves acquirers as well as companies that act as a gateway between the acquirer and the issuer processing a PIN transaction for encryption service providers. The purpose of a PIN assessment is to assess if an organization is securely handing the encryption of PINs in their transactions, such as POS devices, where customers enter their PINs. Businesses that need to have PIN assessments are a small subset of those who fall under the PCI umbrella.

SecurityMetrics data security professionals are experts in PIN assessments, as well as:

• ‍PCI DSS assessments‍
• Forensic incidents response
• ‍SSF/PA-DSS assessments
• ‍Vulnerability scanning
• ‍P2PE assessments
• ‍Penetration testing
• ‍Card data discovery
• ‍Data security products
• ‍Security training
• Consulting

What to expect

PCI PIN security requirements process

The PIN assessment process begins with a gap analysis to determine the work that needs to be done. This initial process includes a consulting phase and a pre-audit phase where you are prepared for the on-site assessment. Your scope is discussed, and all the logistical details of the assessment are determined. Then you would experience the onsite PIN assessment phase.

Finally, you enter the remediation phase, where you are guided through becoming PIN compliant. The PIN assessment process finishes when SecurityMetrics submits your final validation report. Card brands require that assessments are performed every two years.

Get the attention your assessment deserves

SecurityMetrics QPAs are never overbooked, allowing you to get the proper attention your audit requires. With step-by-step guidance, you will receive education and answers to your questions from expert QPAs. Each portion of your PCI PIN Assessment will be assessed and reviewed thoroughly. QPAs guide you through your PIN assessment preparation, onsite assessment, data flow processes, key-management processes, and solution remediation. You will also receive any assistance you need to submit your final PIN assessment report on validation submission to the card brands

Individualized, adaptive service

Get an accurate and comprehensive assessment from experienced, easy to work with QPAs. Remediation assistance is also provided once sources of non-compliance are located. SecurityMetrics QPAs have decades of PCI experience and will work with you to create logical solutions for your business. With step-by-step guidance, you will feel confident in your PIN Assessment experience.

Stay on schedule and in sync

Simple PIN assessment process

SecurityMetrics has developed a smooth and easy PIN assessment process that focuses on responsiveness and timeliness.

Remediation assistance

SecurityMetrics doesn't just tell you if your payment application is compliant. Our QPAs work with you to patch non-compliant items and help guide your payment platform into PCI PIN compliance.