A question that you need to be asking yourself once you have realized the importance of PCI Compliance is, “What PCI compliance scanning company to use?” Once you have asked yourself this question then you need to start searching for a great company to help you on your way to security. Here are some questions to ask those companies:

• How many vulnerabilities do you scan for?
• Does your company offer Daily Scanning, Quarterly Scanning or both?
• Does your company offer PCI Seals to place on my website to show my customers that they can trust me? (Very Important)
• Is your company an ASV certified scanner or are you partnered up with an ASV Certified vendor?
• How long does the process take?
• Do you offer me PCI Compliance tools such as the Self Assessment Questionnaire (SAQ) and the Compliance Validation Basics information to help me become compliant?
• Does the scanning vendor send you the scanning reports frequently or can you download them?
• Will you support me in becoming PCI compliant?

So make sure you save these questions or print out this post so that when you go to these PCI Compliance scanning vendors that you can ask these important questions. Lets go over each question in detail at this time to really understand their unique importance.

Read the rest of this entry »