Commonly Requested OasisLMS Statement-PCI DSS Certification (Current)

PCI DSS Certification (Current)

Pdf Summary

The document is the "Attestation of Compliance for Self-Assessment Questionnaire D – Merchants," focusing on the Payment Card Industry Data Security Standard (PCI DSS) Version 3.2. The attestation is used to declare results from a merchant's self-assessment regarding their compliance with PCI DSS requirements and procedures. It was completed on August 28, 2024. <br /><br /><strong>Key Components:</strong><br /><br />1. <strong>Merchant and QSA Information:</strong> <br />   - Merchant: 360Factor Consulting, LLC, doing business as OasisLMS, located in Chicago, IL. The contact person is Thomas Wong.<br />   - Qualified Security Assessor (QSA): ControlScan, Inc, with contact being Kurt Osburn in Alpharetta, GA.<br /><br />2. <strong>Executive Summary:</strong><br />   - Types of Business: Includes e-commerce, mail order/telephone order (MOTO), and card-present (face-to-face) transactions.<br />   - Card Data Handling: The company processes card payments through a shopping cart and uses various payment applications like PayPal, BluePay, and Stripe, which are listed in the Payment Application Data Security Standard (PA-DSS) directory.<br /><br />3. <strong>Facilities and Environment:</strong><br />   - Includes an Amazon Data Center in Virginia, USA, as part of their PCI DSS assessment.<br />   - The company does not use network segmentation.<br /><br />4. <strong>Third-Party Service Providers:</strong><br />   - The document acknowledges the use of third-party service providers for cardholder data but doesn’t specify who they are.<br /><br />5. <strong>Assessment Conclusion:</strong><br />   - The assessment concluded with a compliant status, meaning all PCI DSS requirements have been met.<br /><br />6. <strong>Validation & Attestation Details:</strong><br />   - The assessment verified that no sensitive authentication data is stored after authorization.<br />   - ASV scans are conducted by ControlScan.<br /><br />This compliance summary provides a snapshot of how 360Factor Consulting, LLC ensures PCI DSS compliance, validating their commitment to protecting cardholder data and meeting industry standards.

Keywords

PCI DSS

self-assessment

360Factor Consulting

OasisLMS

ControlScan

compliance

cardholder data

e-commerce

Amazon Data Center

ASV scans

KGConcept: PCI DSS Self-Assessment Questionnaire D Attestation of Compliance (10)

KGConcept: Merchant (9)

KGConcept: Payment Environment (9)

KGConcept: Payment Channel (8)

KGConcept: Cardholder Data (9)

KGConcept: Third-Party Service Provider (8)

KGConcept: PCI DSS Validation (9)

KGConcept: Compliance Status (8)

KGConcept: Legal Exception (6)

KGConcept: Firewall (8)

KGConcept: Encryption (9)

KGConcept: Access Control (8)

KGConcept: Logging (7)

KGConcept: Vulnerability Management (7)

KGConcept: Information Security Policy (7)

KGConcept: Attestation (8)

KGConcept: Sign-off (7)

KGConcept: Merchant Personnel (6)

KGConcept: QSA Personnel (6)

KGConcept: Ongoing PCI DSS Compliance (9)