February 28, 2025 - One Compliance

Services

Penetration Testing

Vulnerabilities can exist in operating systems, services and applications. They can be created through application flaws, improper configurations and end user behaviours.

Red Team Testing

Much like an adversary, our Red Team takes a holistic view of your operations, evaluating potential vulnerabilities and weaknesses through technical, physical, and process-based means.

Vulnerability Assessment

A vulnerability assessment should be one of the first processes conducted in order to gain baseline information about the security of your business.

Data Protection Officer (DPO)

Our DPO’s are training to lead a competent team of consultants within the information security and compliance industry.

Incident Response

Our retained services offer a proactive and strategic approach to mitigating these risks, ensuring your organisation is prepared to respond swiftly and effectively to any cyber incident.

360 Cyber Review

The 360 cyber review provides a detailed overview of the main components of many frameworks and regulations, ISO27001, COBIT, EU GDPR, DPA 2018 and PCI-DSS.

Data Protection Consultancy

Keeping up with Data Protection requirements can be a large task for businesses. To help make the transition easier, One Compliance offer a number of consultancy services to help.

Compliance Training

One Compliance can help businesses demonstrate and produce evidence that they are processing data in a fair, lawful, and transparent way.

PCI DSS

One Compliance operates a world class team of PCI-DSS qualified security assessors (QSA’s). Leveraging experience within the card payments market space.

Chief Information Security Officer (CISO)

One Compliance can provide a CISCO service which can be used as little or as often as required, reducing the cost, risk and effort for any business.
News
About

About Us

Resources
Careers

Services

Penetration Testing

Vulnerabilities can exist in operatiing systens, services and applications. They can be created through application flaws, improper configurations and end user behaviours.

Red Team Testing

Much like an adversary, our Red Team takes a holistic view of your operations, evaluating potential vulnerabilities and weaknesses through technical, physical, and process-based means.

Vulnerability Assessment

A vulnerability assessment should be one of the first processes conducted in order to gain baseline information about the security of your business.

Data Protection Officer (DPO)

Our DPO’s are trainined to lead a competent team of consultants within the information security and compliance industry.

Incident Response

Our retained services offer a proactive and strategic approach to mitigating these risks, ensuring your organisation is prepared to respond swiftly and effectively to any cyber incident.

360 Cyber Review

the 306 cyber review provides a detailed overview of the main components of many frameworks and regulations, ISO27001, COBIT, EU GDPR, DPA 2018 and PCI DSS

Data Protection Consultancy

One comliance can help businesses demonstrate and produce evidence that they are processing data in a fair, lawful and transparent way.

Compliance Training

One comliance can help businesses demonstrate and produce evidence that they are processing data in a fair, lawful and transparent way.

PCI DSS

One compliance operate a world class team of PCI-DSS qualified security assessors (QSA’s). Leveraging experience within the card payments market space.

SWIFT CSP

One Compliance offers SWIFT Customer Security Programme (CSP) assessment and consultancy services. We are a team of experienced certified professionals who can help you achieve compliance with the SWIFT CSP framework.

Chief Information Security Officer (CISO)

One compliance can provide a CISCO service which can be used as little or as often as required, reducing the cost, risk and effort for any business.
News
About

About Us

Resources
Careers
Contact

New Guidance for PCI DSS v4.0 SAQ-A Eligibility Criteria

After the PCI SSC dropped the revised SAQ-A at the end of January 2025, a FAQ (1588) has been issued to clarify how to meet the new eligibility criteria in lieu of some controls being removed from scope. A quick refresher on the changes … “The merchant has confirmed that their site is not susceptible to attacks […]

Day: 28 February 2025

New Guidance for PCI DSS v4.0 SAQ-A Eligibility Criteria