Pci compliance software
- Staff hours short of the evidence load
- 20
- Evidence items per year
- 480
- Evidence hours per year
- 120
- Scan spend per year
- $1,200
Every figure on this page is computed from the inputs entered, by the method stated below it. Attestvio publishes no rule text, no control list, no scoring scale and no benchmark gap rate: the minutes, the rates, the scales and the scopes are yours, and the defaults are a worked example to replace with your own figures.
The figures above start from a worked example (20). Change any input and the answer updates as you type.
Download the Pci compliance software worked example (CSV)
This is a PCI scope sheet, the sizing pci compliance software does for the cardholder-data environment and a merchant's IT lead does in a spreadsheet before the assessor's call. Systems that store, process or transmit cardholder data times controls per system times evidence items per control is the items a year; times minutes per item over 60 is the hours; scans per year times the cost per scan is the scan spend; hours over the staff hours available is the load; and hours less staff hours is the shortfall. Every figure is yours, including the control count; the sheet publishes no requirement list. Free, on the page, no account; the paid plan keeps every system with its controls and evidence.
Evidence items and hours
Twelve systems at 20 controls and two evidence items is 480 items and 120 hours a year at 15 minutes each on the worked example. The count follows the scope, which is why the systems figure is the first input and why reducing scope is the cheapest control there is.
Scan spend
Four scans a year at $300 is $1,200; the figure is separated from the staff hours because one is a purchase and the other is a schedule.
Load and shortfall
120 evidence hours against 100 staff hours is 120% of the time available and 20 hours short. The sheet returns the shortfall so the choice between reducing scope, adding hours and buying help is made in advance.
Pci compliance software: common questions
Is this free PCI compliance software?
It is a free sheet that sizes the evidence work: enter the in-scope systems, controls, evidence items, minutes, scans and their cost, and the staff hours, and it works the items, hours, scan spend, load and shortfall on the page with no account. Attestvio Pro keeps every system with its controls and evidence.
How much work is PCI compliance for a small merchant?
Systems times controls times evidence items times minutes, over 60: 120 hours a year on the worked example, plus the scans. The sheet publishes no requirement count and works your own scope.
Does reducing scope reduce the work?
Directly: every system taken out of the cardholder-data environment removes its controls and evidence items from the sheet. The sheet shows the hours any scope costs; whether a system can leave scope is your assessor's question.
Attestvio Pro
Keeping what you make
The sheets are free forever. Pro turns them into the record: every obligation with its controls and the evidence collected against them, dated; every audit with its findings and their remediation; every incident and case with its status; every attestation with who signed it; your company name and logo on the printed sheets, no watermark, and an export when the examiner or the auditor asks.
- Download as PDF
- No Attestvio watermark
- Save every sheet and reopen it later
- Your company name and logo on the paperwork
- Export every register, audit and attestation in one go
- Evidence-due, attestation-due and case-aging reminders emailed to each owner
- Connect your own Stripe account and get paid online
- Connect your QuickBooks Online or Xero
$29per month, whole programme
Start Attestvio Pro PricingRenews monthly at the price above until you cancel. We email you before any price change.