PCI Compliance: Understanding the Three Assessment Methods - Overview
When completing your annual PCI DSS compliance validation through the Paysafe PCI Portal, you will be asked to choose one of three assessment methods:
- Guide Me
- Expert
- Upload
Each option is designed for a different level of PCI knowledge and compliance readiness. Selecting the right method can help streamline the validation process and ensure your business completes the appropriate PCI DSS requirements.
Before You Begin
Once your account has been onboarded to the PCI DSS Portal, you will receive login credentials via email.
- Your username is typically your Merchant ID (MID).
- During your first login, you will be asked to review and confirm your contact information.
- The portal will guide you through the process of determining and completing your PCI DSS requirements.
Option 1: Guide Me (Recommended)
The Guide Me option is recommended for most merchants.
This method uses Paysafe's profiling tool to learn more about your business environment and how you accept card payments. Based on your answers, the portal determines the PCI DSS requirements that apply to your business and presents the relevant assessment questions.
Benefits
- Simplifies the compliance process.
- Helps determine your PCI scope automatically.
- Only presents requirements relevant to your business environment.
- Ideal for merchants who are unfamiliar with PCI DSS requirements.
Best For
- Small and medium-sized businesses.
- First-time PCI DSS users.
- Merchants who want step-by-step guidance through the compliance process.
Option 2: Expert
The Expert option is intended for merchants who already understand their PCI DSS assessment requirements and do not need assistance determining their compliance scope.
When selecting this option, the portal does not use the profiling tool to guide your assessment. Instead, you will complete the applicable PCI DSS requirements directly.
Benefits
- Faster for experienced PCI users.
- Allows direct access to assessment requirements.
- Suitable for businesses that already know their PCI assessment type.
Best For
- Experienced PCI DSS users.
- Organizations with internal compliance teams.
- Merchants who already understand their PCI validation requirements.
Option 3: Upload
The Upload option is designed for merchants who have already completed their PCI DSS compliance validation outside of the Paysafe PCI Portal.
This allows you to upload existing PCI documentation for review and validation.
Examples of documentation that may be uploaded include:
- Self-Assessment Questionnaire (SAQ)
- Attestation of Compliance (AoC)
- Other supporting PCI validation documentation, where applicable
Benefits
- Avoids duplicating work already completed elsewhere.
- Provides a central location for PCI compliance records.
- Streamlines the validation process for merchants using external compliance providers.
Best For
- Merchants who have completed PCI validation through a third party.
- Businesses that already possess a current SAQ or AoC.
- Organizations with established PCI compliance programs.
Which Option Should I Choose?
| Assessment Method | Recommended For |
|---|---|
| Guide Me | Merchants who want assistance determining their PCI requirements |
| Expert | Merchants who already understand their PCI DSS assessment type and requirements |
| Upload | Merchants who have already completed PCI validation externally and need to submit documentation |
For most merchants, Guide Me is the easiest and most efficient way to complete PCI DSS compliance, as the portal helps determine the requirements that apply to your business.
Annual PCI Validation
PCI DSS compliance is not a one-time activity. Merchants are required to validate their compliance status annually and may receive reminder notifications before their validation expires.
To avoid compliance gaps, ensure your PCI validation is completed before your renewal date and keep your contact information up to date within the PCI Portal.
Need Help?
If you have any questions or need support, please click the Help button in your ServiceBox account or email us at support@getservicebox.com.