Commonly Requested OasisLMS Statement-PCI DSS Certification (Current)

PCI DSS Certification (Current)

Pdf Summary

The document is the "Attestation of Compliance for Self-Assessment Questionnaire D – Merchants," focusing on the Payment Card Industry Data Security Standard (PCI DSS) Version 3.2. The attestation is used to declare results from a merchant's self-assessment regarding their compliance with PCI DSS requirements and procedures. It was completed on August 28, 2024. <br /><br />**Key Components:**<br /><br />1. **Merchant and QSA Information:** <br />   - Merchant: 360Factor Consulting, LLC, doing business as OasisLMS, located in Chicago, IL. The contact person is Thomas Wong.<br />   - Qualified Security Assessor (QSA): ControlScan, Inc, with contact being Kurt Osburn in Alpharetta, GA.<br /><br />2. **Executive Summary:**<br />   - Types of Business: Includes e-commerce, mail order/telephone order (MOTO), and card-present (face-to-face) transactions.<br />   - Card Data Handling: The company processes card payments through a shopping cart and uses various payment applications like PayPal, BluePay, and Stripe, which are listed in the Payment Application Data Security Standard (PA-DSS) directory.<br /><br />3. **Facilities and Environment:**<br />   - Includes an Amazon Data Center in Virginia, USA, as part of their PCI DSS assessment.<br />   - The company does not use network segmentation.<br /><br />4. **Third-Party Service Providers:**<br />   - The document acknowledges the use of third-party service providers for cardholder data but doesn’t specify who they are.<br /><br />5. **Assessment Conclusion:**<br />   - The assessment concluded with a compliant status, meaning all PCI DSS requirements have been met.<br /><br />6. **Validation & Attestation Details:**<br />   - The assessment verified that no sensitive authentication data is stored after authorization.<br />   - ASV scans are conducted by ControlScan.<br /><br />This compliance summary provides a snapshot of how 360Factor Consulting, LLC ensures PCI DSS compliance, validating their commitment to protecting cardholder data and meeting industry standards.

Keywords

PCI DSS

self-assessment

360Factor Consulting

OasisLMS

ControlScan

compliance

cardholder data

e-commerce

Amazon Data Center

ASV scans