PCI DSS Audits – Preparing for success

Organisations that process, transmit and/or store cardholder data, either as a merchant or as a service provider, must comply with the PCI DSS (Payment Card Industry Data Security Standard). They must also prove that compliance, either via an annual SAQ (self-assessment questionnaire) or third-party audit.

This paper will help organisations understand and prepare for the audit process by discussing:

• The most common audit challenge, and how to overcome it;
• How the audit process works; and
• A seven-step process to prepare for audit success.

Published: December 2025
Keywords: PCI DSS, payment card data security, audits