Lesezeit: 1 MinutenAndersen has obtained a PCI DSS Attestation of Compliance (AOC) for its assessed services. The document provides evidence of compliance that clients can use in their own PCI DSS assessments.
The assessed scope covers systems security services and payment software development. It also includes IT support, application and infrastructure support and maintenance, and merchant services.
As a Managed Services Provider and Managed Security Service Provider, Andersen can build and operate cardholder data environments. Its teams provide security monitoring and incident response for these environments.
For clients, the AOC can reduce duplicate assessment work. Assessors may use it as evidence of Andersen’s compliance for the services covered by the assessment. They may still request additional documentation or assess other aspects of the client’s environment. Clients remain responsible for their own PCI DSS compliance.
Vladimir Pedchenko, Director of Cybersecurity and Managed Services at Andersen, said:
The assessment involved four months of evidence gathering and workshops with our Qualified Security Assessor. We completed it with no gaps identified and no compensating controls required. Clients can use our AOC as evidence for the services covered by the assessment.
The AOC complements Andersen’s AWS MSP Partner status. Together, they support its managed cloud and security services for payment workloads on AWS.
Clients can request a copy of the AOC or confirm coverage for a specific service by emailing Andersen at contact@andersenlab.com.
About Andersen
Andersen is an international IT services and software development company. Its services include custom software engineering, cloud and DevOps, cybersecurity, IT consulting, and managed services. Andersen helps businesses build and modernize technology environments, then operate and secure them.
