PCI

Published by : Dr. Suzanne Miller, CPT, CHS-III, CISM, CISA, QSA 

The PCI Self-Assessment Questionnaire (SAQ) reminds me of the Internal Revenue Service (IRS) Tax Returns.  The returns are written for people who have the reading comprehension level of a third year law student.  Yet, yearly we are expected to fill in the boxes and lines correctly on the appropriate returns. If we miss interpret which forms are appropriate and misunderstand how to fill in the forms,  we can be subject to fines and  imprisonment for filing incorrect information.  Ask Wesley Snipes how it feels to go to jail for 3 years and pay over $5,000,000 in taxes and penalties. In his own words, “Newly acquired wealth does not endow one with immediate wisdom.”

The PCI SAQ will have the same far reaching effects of IRS Tax Returns.  Merchants (businesses who accept credit cards for payment) are required to fill out the SAQ every year.  90% of all merchants do not have the immediate wisdom to understand the business activities they are required to have in place or the impact of checking the box on the SAQ stating they have the required activities in place when in reality they do not.  Filing incorrect SAQs can seriously affect merchants.  Incorrect filings subject the merchant to penalties, fines and loss of the ability to accept credit cards for payment.

What a voluminous task to educate and train the over 8,000,000 businesses in what PCI is requiring of them; and how to inexpensively implement and manage these requirements. 

The Compliance and Audit Group has accepted this challenge.  In August 2008 we will be offering PCI Programmed Instructional Workbooks, PCI Workshops and PCI Internet-based training which are comprehensive, easy to use and cost effective.  If you would like to receive updates on our new programs, talk to a PCI consultant or be on our mailing list, email us at info@compliance-auditgroup.com.