A PHP Error was encountered

Severity: Warning

Message: file_get_contents(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

Filename: libraries/Layer_lib.php

Line Number: 13

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 13
Function: file_get_contents

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 200
Function: import_css

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/head.php
Line: 32
Function: ImportCss

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 70
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Warning

Message: file_get_contents(): Failed to enable crypto

Filename: libraries/Layer_lib.php

Line Number: 13

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 13
Function: file_get_contents

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 200
Function: import_css

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/head.php
Line: 32
Function: ImportCss

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 70
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Warning

Message: file_get_contents(https://www.pcicompliance.com/assets/front/default/xml/home.xml): failed to open stream: operation failed

Filename: libraries/Layer_lib.php

Line Number: 13

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 13
Function: file_get_contents

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 200
Function: import_css

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/head.php
Line: 32
Function: ImportCss

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 70
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Notice

Message: Trying to get property 'css' of non-object

Filename: libraries/Layer_lib.php

Line Number: 37

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 37
Function: _error_handler

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 15
Function: _import_css

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 200
Function: import_css

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/head.php
Line: 32
Function: ImportCss

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 70
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Notice

Message: Trying to get property 'item' of non-object

Filename: libraries/Layer_lib.php

Line Number: 37

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 37
Function: _error_handler

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 15
Function: _import_css

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 200
Function: import_css

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/head.php
Line: 32
Function: ImportCss

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 70
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

WHAT IS SAQ?

The Self-Assessment Questionnaire (SAQ) is a document that merchants are required to complete every year and submit to their Acquiring Bank. Taking the SAQ with us is the fastest way to find out what you need to do to become PCI compliant, with expert help at every stage along the way.

*New users register first to create a free account. Existing HackerGuardian customers should enter their username and password on the enrollment form. A new 'SAQ' tab will be added to the HackerGuardian interface

PCI SAQ DEFINITION

The PCI Data Security Standard Self Assessment Questionnaire (SAQ) is a validation tool intended to assist merchants and service providers who are permitted by the payment brands to self-evaluate their compliance with the Payment Card Industry Data Security Standard (PCI DSS).

The questionnaire consists of a set of 12 security requirements sub-divided into 6 broader sections - with each section targeting a specific area of security from the PCI Data Security Standard. All sections must be completed. Completing a Self-Assessment Questionnairehelps online merchants evaluate their security practices and plan compliance with the required PCI Data Security Standard. Further, completing the required SAQ - gives others, such as their Acquiring Bank, the necessary evidence that they are in Compliance with the PCI Data Security Standard.

There are 9 different versions of the self assessment questionnaire. The version that your organization will need to complete depends on how your company handles credit card data - this is called your 'Validation Type'. For some merchants, the appropriate questionnaire is short and simple, while for others it is long and technical. The first five or six questions in the compliance wizard will quickly determine your company's validation type then automatically begin the appropriate questionnaire.

ABOUT THE PCI SECURITY STANDARDS COUNCIL

The PCI Security Standards Council is an open global forum for the ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection. The organization was founded by American Express, Discover Financial Services, JCB International, MasterCard, and Visa.

WHAT ARE THE CRITERIA FOR PASSING OR FAILING THE QUESTIONNAIRE?

Merchants have to pass (or be able to say 'Not Applicable') to ALL questions to be considered compliant with the PCI Data Security Standard.

Failing any question means the merchant or service provider is not compliant. The risk(s) identified by the questionnaire must be remedied and the questionnaire retaken.

WHY DOES PCI COMPILENCE PROVIDE THE PCI SELF ASSESSMENT QUESTIONNAIRE (SAQ)?

We have simplified this often confusing process with the launch of the HackerGuardian PCI ComplianceWizard. The intuitive web-based application guides merchants through every step of thePCI SAQ. Each question is accompanied by expert advice to help the merchant interpret and appropriately answer each question. At the end of the wizard you will find out immediately whether or not your answers qualify your organization as PCI compliant.

PCI COMPILENCE PCI SAQ BENEFITS

Glad you asked. At the end of your questionnaire you will receive:

  • A Questionnaire Summary - Listing security control areas on which you failed compliance.
  • A custom 'Remediation Plan' for your company containing:
  • A comprehensive List of Remedial Actions that you need to take to attain full PCI compliance.
  • A remediation planning tool enabling task prioritization and project management.
  • A non-compliant resolution summary with links to recommended products and services that will help you cost-effectively resolve non-compliant areas.
  • And of course, a 'ready-to-submit' PCI DSS Self Assessment Questionnaire.

What if I can’t finish it? Your progress is automatically saved after each question - allowing you to log out and return at a later date to complete the questionnaire. Your free account and responses are retained, giving you an opportunity to revise and modify any of your answers. This also allows you to update, schedule and track the progress of outstanding remediation tasks.

Take PCI SAQ Now

PAYMENT CARD INDUSTRY (PCI) DATA SECURITY STANDARD

REQUIREMENTS AND SECURITY ASSESSMENT PROCEDURES | VERSION 3.2

Click To Download Pdf

SAQ Type Description
A Card-not-present merchants (e-commerce or mail/telephone-order) that have fully outsourced all cardholder data functions to PCI DSS compliant third-party service providers, with no electronic storage, processing, or transmission of any cardholder data on the merchant’s systems or premises. Not applicable to face-to-face channels.
A-EP E-commerce merchants who outsource all payment processing to PCI DSS validated third parties, and who have a website(s) that doesn’t directly receive cardholder data but that can impact the security of the payment transaction. No electronic storage, processing, or transmission of any cardholder data on the merchant’s systems or premises. Applicable only to e-commerce channels.
B Merchants using only: Imprint machines with no electronic cardholder data storage; and/or Standalone, dial-out terminals with no electronic cardholder data storage.Not applicable to e-commerce channels
B-IP Merchants using only standalone, PTS-approved payment terminals with an IP connection to the payment processor, with no electronic cardholder data storage. Not applicable to e-commerce channels.
C-VT Merchants who manually enter a single transaction at a time via a keyboard into an Internet-based virtual terminal solution that is provided and hosted by a PCI DSS validated third-party service provider. No electronic cardholder data storage. Not applicable to e-commerce channels.
C Merchants with payment application systems connected to the Internet, no electronic cardholder data storage. Not applicable to e-commerce channels.
P2PE-HW Merchants using only hardware payment terminals that are included in and managed via a validated, PCI SSC-listed P2PE solution, with no electronic cardholder data storage. Not applicable to e-commerce channels.
D-MER All merchants not included in descriptions for the above SAQ types.
D-SP All service providers defined by a payment brand as eligible to complete a SAQ.

SAQ SAMPLE

SAMPLE QUESTIONS TAKEN DIRECTLY FROM THE SELF-ASSESSMENT QUESTIONNAIRE YOU WILL TAKE

Build and maintain a Secure Network
1. Install and maintain a firewall configuration to protect data
1.1 Are firewall and router configuration standards established to include the following:
1.1.1 Is there a formal process for approving and testing all external network connections and changes to the firewall and router configurations



8.3 Is there a formal process for approving and testing all external network connections and changes to the firewall and router configurations



Take SAQ Now

A PHP Error was encountered

Severity: Warning

Message: simplexml_load_file(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

Filename: libraries/Layer_lib.php

Line Number: 27

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 27
Function: simplexml_load_file

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 218
Function: import_js

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/footer.php
Line: 167
Function: ImportJs

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 76
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Warning

Message: simplexml_load_file(): Failed to enable crypto

Filename: libraries/Layer_lib.php

Line Number: 27

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 27
Function: simplexml_load_file

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 218
Function: import_js

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/footer.php
Line: 167
Function: ImportJs

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 76
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Warning

Message: simplexml_load_file(https://www.pcicompliance.com/assets/front/default/xml/home.xml): failed to open stream: operation failed

Filename: libraries/Layer_lib.php

Line Number: 27

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 27
Function: simplexml_load_file

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 218
Function: import_js

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/footer.php
Line: 167
Function: ImportJs

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 76
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Warning

Message: simplexml_load_file(): I/O warning : failed to load external entity "https://www.pcicompliance.com/assets/front/default/xml/home.xml"

Filename: libraries/Layer_lib.php

Line Number: 27

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 27
Function: simplexml_load_file

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 218
Function: import_js

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/footer.php
Line: 167
Function: ImportJs

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 76
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Notice

Message: Trying to get property 'js' of non-object

Filename: libraries/Layer_lib.php

Line Number: 59

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 59
Function: _error_handler

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 28
Function: _import_js

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 218
Function: import_js

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/footer.php
Line: 167
Function: ImportJs

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 76
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once

A PHP Error was encountered

Severity: Notice

Message: Trying to get property 'item' of non-object

Filename: libraries/Layer_lib.php

Line Number: 59

Backtrace:

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 59
Function: _error_handler

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/libraries/Layer_lib.php
Line: 28
Function: _import_js

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/helpers/MY_url_helper.php
Line: 218
Function: import_js

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/themes/default/views/include/footer.php
Line: 167
Function: ImportJs

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 76
Function: view

File: /var/www/vhosts/pcicompliance.com/httpdocs/application/controllers/Pcicompliance.php
Line: 25
Function: _themes

File: /var/www/vhosts/pcicompliance.com/httpdocs/index.php
Line: 320
Function: require_once