Deitche

Services

Compliance audits for payments and critical services

Deitche carries out PCI DSS, PCI SSF and NIS audits. Each engagement is focused on giving you a clear, independent view of where you stand against the relevant standard or regulation.

PCI DSS Data Security Standard

PCI DSS audits

The Payment Card Industry Data Security Standard applies to organisations that store, process or transmit cardholder data, as well as those that can affect its security. A PCI DSS audit assesses the security controls protecting that data and the environment around it.

  • Defining and validating the cardholder data environment and audit scope
  • Assessment of security controls against PCI DSS requirements
  • Review of policies, procedures and supporting evidence
  • Reporting of findings and compliance status

PCI SSF Software Security Framework

PCI SSF audits

The PCI Software Security Framework sets security requirements for payment software and for the lifecycle used to develop and maintain it. A PCI SSF audit looks at both the software itself and the vendor's secure development practices.

  • Assessment of payment software against PCI SSF security requirements
  • Review of secure software development lifecycle practices
  • Evaluation of how sensitive data is protected within the software
  • Reporting of findings and assessment results

NIS Network and Information Systems

NIS audits

The EU NIS framework requires organisations providing essential and important services to manage cybersecurity risks to their network and information systems. A NIS audit reviews how well your organisation meets those obligations.

  • Review of cybersecurity risk management measures
  • Assessment of governance, incident handling and business continuity arrangements
  • Evaluation of supply chain and third-party security practices
  • Reporting of gaps and areas for improvement

How an audit works

A structured approach

  1. Scoping

    Agreeing which systems, processes and requirements are in scope.

  2. Assessment

    Reviewing evidence, interviewing staff and examining controls.

  3. Reporting

    Documenting findings and compliance status clearly.

Need penetration testing too?

We work with partner pentest companies to deliver audits and testing as one bundle.

See our partnerships