SecurityMetrics

“In working through audits, it’s a rare-find where the company consistently brings a positive approach to working through issues as opposed to a mind-set of penalties and being punitive in nature. One of the best outcomes we’ve experienced in working with SecurityMetrics is a sense that they are on our side to help us meet and stay PCI compliant. From great folks, to strong communications all lead to an overall positive experience that with their help, we consistently learn and improve our environment.”

“From sign up to implementation SecurityMetrics was with us every step of the way. Every member of the team at SecurityMetrics was knowledgeable and did not hesitate to help with any questions we had. They explained the process to us and to our franchisees in a way that was easy to understand and felt attainable. Now, the majority of our brand is demonstrating full compliance. SecurityMetrics made an overwhelming process organized, cost effective and easily implemented within our brand and budget.”

“I love the customer service—(SecurityMetrics) truly (has) the nicest people on earth. They are never rude, and they couldn’t be nicer to our merchants. I can’t imagine having to pick up the phone every day and think ‘I’m going to get yelled at again.’ But they do it well, they really do. I’m never disappointed. They always help (our merchants) in one way or another.”

“In addition to all the help they already provide, SecurityMetrics employees volunteer to help us through conversations with potential customers and presentations at conferences to explain how our P2PE solution reduces overall PCI scope. I trust the team at SecurityMetrics as my go to experts for all things PCI and P2PE.”

“I appreciate that you guys are always there for us to contact if we have questions. As things change and new technologies come out, we can always bounce ideas off of our assessor or other SecurityMetrics professionals for advice. We can ask if new technology can be used and what we should be looking out for so we stay in compliance.”

“Very much so. One of the nice things about the portal is that you have the ability to go back to previous assignments and see back and forth comments. You can see what evidence was provided for past assessments, if there were any mistakes, if we gave the wrong evidence, etc. It’s nice to know that we have the ability to look back on past assessments. The other portals we have used don’t have that ability.”

“Our partnership helps us not only comply with PCI but also make our processes better and more secure. The assessment process is also very smooth. You get clear questions about what’s needed, so you’re able to give specific answers instead of trying to guess what is needed. Their portal simplifies the process and ensures we are on the same page as the assessment team. The portal makes sure everyone knows where we are in the process, and what’s still needed. It’s also easy to communicate within the platform to get any documentation or sign-off on decisions.”

“Working with SecurityMetrics has been much less confrontational and more like we are working on a team that wants to make things better. In the past, it’s felt like assessors come in and want a big “gotcha!”’”

“Amazing! We’ve been through other types of audits, and it’s difficult to collect evidence because it’s typically done from a nontechnical standpoint. We’ve done SOC audits in the past that were done by accountants who aren’t technical, and we’ve gotten very broad questions. Whereas, dealing with SecurityMetrics, we’ve received specific technical questions that have concrete answers for us to send back.”

“Privaxi really helped us focus in and get everything wrapped up, to the point where it’s finalized, submitted, and it’s a pro- duct that you are proud to present.”

“It’s not a one size fits all. They will modify the project as needed. You’re not just given a template, and you have to run through the template; it’s custom to you and your organization.”

“They really just helped us along the way and any stress you might be feeling, they reassure you the whole time that everything is going to be okay. They have a whole team to help you out.”

“I have even talked to other CIO’s, directors of IT, and other organizations and let them know of the experience I had. I feel super comfortable with the process now, with you all.”

“As we got further along the process, everything was just clicking. And even now–going into our interim assessment–I’m not sweating it at all.”

“This was my first time going through this and if we didn’t have a solid backing to guide me the whole way, I would’ve been totally lost.”

“And we have had nothing but great experiences when it comes to communication with you all.”

“We were impressed with every aspect of the experience. While audits are never fun, the experience was positive and educational for our entire organization. The QSA was clearly an expert in this field and conducted the entire engagement professionally. We’re quite happy to be publicly associated with a leader in the security industry.”

“SecurityMetrics has been a great partner in helping Christian Brothers Automotive continue to keep our customer information private and secure.”

“It’s been great from the beginning to work with responsive companies that take ownership.”

“I never thought that it could be this seamless. I’m satisfied with our partners Privaxi and SecurityMetrics.”

“SecurityMetrics’ deep understanding of the PCI DSS requirements combined with their ability to apply the standards to our specific landscape built credibility with our campus stakeholders and allowed us to confidently report our compliance.”

“One of my concerns with the current threat environment is that it felt like we were always reacting to threats instead of proactively attacking them. This partnership has given me the comfort of knowing that someone is thinking proactively about threats for us. This has helped us manage and maintain good security across the university and health system networks.”

“When USC first started tackling PCI compliance, I worked off an Excel spreadsheet and had a very manual process. We then partnered with SecurityMetrics and found that this ended up alleviating a lot of the manual work we were doing, streamlining our processes. Our merchants love that they are able to just upload documents using their project management tool.”

“I know that PCI version 4.0 is a challenge that everyone who processes credit cards must face, but instead of waiting until the last minute to begin, we have begun working with SecurityMetrics to get a jump start. With a forward-thinking approach, SecurityMetrics and I helped the university implement additional requirements that would be part of PCI version 4.0.”

“When I first began at USC, we were responsible for SAQ D– the highest PCI compliance level for the most complex credit card environments. Since then, we’ve moved to P2PE assessments while still having some SAQ C responsibilities. Through collaborative efforts with SecurityMetrics, my team and I have narrowed down our PCI requirements and reduced our risk. SecurityMetrics specifically helped reduce our scope while maintaining a high level of security, simplifying our requirements year after year.”