Stratica PCI DSS Compliance Calendar

Close PCI DSS Compliance Gaps Before They Cost You

Are you constantly remediating issues ahead of PCI DSS assessments?

Even the most secure, well-run organisations aren’t immune to compliance requirements falling through the cracks until an assessment forces the urgency.

As your team juggles competing priorities, PCI DSS compliance requirements can get deprioritised. A quarterly ASV scan gets pushed back a fortnight, then a month. Firewall rule reviews drop off the calendar when the person who owned them changes roles. Log reviews happen, but nobody records that they happened or who signed off. When it’s not assessment time, it’s not urgent.

By the time the next SAQ or ROC comes around, your team spends weeks rebuilding evidence for controls that were operating correctly the whole time, simply because there’s no record of the work.

The obligations themselves aren’t the difficult part. Maintaining them at a regular cadence over the full twelve-month compliance cycle is.

That’s why we’ve developed the PCI DSS Compliance Calendar. It maps every obligation to a date so your team has a consistent schedule to work from. It’s the cadence our QSAs run with clients – built so your team can run it without us.

What’s in the PCI DSS Compliance Calendar?

A full PCI DSS compliance calendar with every recurring obligation, when it’s due and the evidence it produces. It also includes our implementation notes and audit guidance to keep you on the right track.

**Continuous (Daily)**

Payment page monitoring

Check audit logs

**Weekly

Monthly**

**Quarterly**

• External vulnerability scanning (ASV), including re-scan windows and what constitutes a passing result.
• log review summaries
• terminal
• TPSP document requests
• Network rule validations
• Firewall and access rule reviews, and the record each review needs to leave behind.

**Annual**

• Penetration testing requirements, scope and timing.
• SAQ or ROC assessment timing, and when to start preparing so evidence is already assembled.

**Continuous**

• Log monitoring and review obligations, and what frequency actually satisfies the requirement.
• The documentation to maintain between assessments, so the next one starts from a complete record.

The PCI DSS Compliance Calendar gives your team a central source of truth. It lets
you see at a glance what you need to do to maintain compliance and when, so you’re not scrambling ahead of your assessment.

Request Your PCI DSS Compliance Calendar

It’s free, includes 30 minutes with a QSA to put you on the right track, and there’s no further commitment.

Simply fill in the form below and we’ll send the calendar to your email.