Pci compliance software

Staff hours short of the evidence load
20
Computed on this page from the inputs below
Evidence items per year
480
Computed on this page from the inputs below
Evidence hours per year
120
Computed on this page from the inputs below
Scan spend per year
$1,200
Computed on this page from the inputs below

Every figure on this page is computed from the inputs entered, by the method stated below it. Attestvio publishes no rule text, no control list, no scoring scale and no benchmark gap rate: the minutes, the rates, the scales and the scopes are yours, and the defaults are a worked example to replace with your own figures.

Your numbers

The figures start from a worked example (20). Replace any input with your own count and the answer moves as you type; nothing is stored and nothing is sent.

Download the Pci compliance software worked example (CSV)

A PCI scope sheet: the sizing pci compliance software does for the cardholder data environment, and that a merchant's IT lead does in a spreadsheet before the assessor's call. Give it the systems that store, process or transmit card data, the controls and evidence on each, your scan costs and the staff hours you have; it returns the yearly evidence load, the hours, the scan spend and the shortfall.

Evidence items and hours

Twelve systems at 20 controls and two evidence items is 480 items and 120 hours a year at 15 minutes each on the worked example. The count follows the scope, which is why the systems figure is the first input and why reducing scope is the cheapest control there is.

Scan spend

Four scans a year at $300 is $1,200; the figure is separated from the staff hours because one is a purchase and the other is a schedule.

Load and shortfall

120 evidence hours against 100 staff hours is 120% of the time available and 20 hours short. The sheet returns the shortfall so the choice between reducing scope, adding hours and buying help is made in advance.

Pci compliance software: what compliance officers ask first

Is this free PCI compliance software?

It is a free sheet that sizes the evidence work: enter the in-scope systems, controls, evidence items, minutes, scans and their cost, and the staff hours, and it works the items, hours, scan spend, load and shortfall on the page with no account. Attestvio Pro keeps every system with its controls and evidence.

How much work is PCI compliance for a small merchant?

Systems times controls times evidence items times minutes, over 60: 120 hours a year on the worked example, plus the scans. The sheet publishes no requirement count and works your own scope.

Does reducing scope reduce the work?

Directly: every system taken out of the cardholder-data environment removes its controls and evidence items from the sheet. The sheet shows the hours any scope costs; whether a system can leave scope is your assessor's question.

Attestvio Pro

From the number to the record

The sheets are free forever. Pro turns them into the record: every obligation with its controls and the evidence collected against them, dated; every audit with its findings and their remediation; every incident and case with its status; every attestation with who signed it; your company name and logo on the printed sheets, no watermark, and an export when the examiner or the auditor asks.

  • Download as PDF
  • No Attestvio watermark
  • Save every sheet and reopen it later
  • Your company name and logo on the paperwork
  • Export every register, audit and attestation in one go
  • Evidence-due, attestation-due and case-aging reminders emailed to each owner
  • Connect your own Stripe account and get paid online
  • Connect your QuickBooks Online or Xero

$29per month, whole program

Start Attestvio Pro Free for 14 days. No card needed. Pricing

The first 14 days are free and no card is asked for. Add a card during the trial and the first charge is on the day it ends; do not, and your workspace becomes read-only with nothing deleted. Renews monthly at the price above until you cancel. We email you before any price change.

Where the figures in this sheet come from

PCI Security Standards Council: the PCI DSS standard.

Start Attestvio ProGet Attestvio Pro, $29 a month