CNS 394/395

Payment Card Industry (PCI)Data Security Standard (DSS)

Development of a standard consulting proposal for small businesses trying to achieve PCI compliance

Rev 1.04 - 10 points

THIS IS AN INDIVIDUAL ASSIGNMENT

CNS 394/395 DePaul University

Dear consulting team,

It is with great pleasure that I can announce that our organization, JP Consulting Inc, has been validated as an “Approved Scanning Vendor” (ASV) by the PCI Security Standard Council (SCC).

Our business managers and partners want to aggressively market and sell our services as a PCI ASV and increase our consulting revenues. They want to start by focusing on small businesses that need to achieve PCI compliance by filling out the PCI Self-Assessment Questionnaire (SAQ) D and passing a complete vulnerability scan by an ASV.

I would like you to design and develop a standard consulting service project and proposal that can be used as a standard template to sell the services to the customer.

Our consulting services should concentrate on:

Reviewing that the customer has properly answered the self assessment questionnaire.

Perform and document the vulnerability scan for the customer.

We want to concentrate our scope to customers that require 10 or fewer devices to be scanned and have 50 or fewer employees.

Please develop such a standard offering. This should include (but is not limited to):

Presenting our company to the customer Why they should use us The scope of the project Tasks, hours associated with tasks Assumptions Cost and any optional cost/services Deliverables

Please present your standard proposal to your manager.

PCI Compliance Audit - 1 - Proposal Development