PCI Compliance Portal

Managed Security Operations Division

847.221.0200 halock.com

Overview and Screenshots

Even the most sophisticated
security professional may
need some extra assistance
when it comes to interpreting
the Payment Card Industry
(PCI) Data Security Standard
and other payment compli-
ance requirements.
In addition to inquiries with
our Executive Analysts,
Halock provides a web-based
portal that offers a wealth of
information on compliance
requirements, sample com-
pensating controls, project
planning templates, risk as-
sessment templates, and
more. As a result, our clients
are able to more efficiently
and effectively mitigate risk
and achieve compliance. All
information posted to the
Portal goes through an exten-
sive peer review process,
providing the highest level of
assurance.
Within the Portal, you will
find:
 PCI DSS knowledge base with
extensive details about each
PCI requirement, possible com-
pensating controls, and other
relevant information
 Task management functionality
for assigning and tracking pro-
gress on PCI-related efforts
 Ability to filter PCI require-
ments by roles/teams that
would be responsible for ad-
dressing each requirement
 Current news articles related to
PCI, including summaries and
expert analysis by our team of
QSAs
 Ability to submit inquiries to
our team of QSAs and Execu-
tive Analysts regarding any PCI
-related matters
 Downloadable tools, templates
and checklists to facilitate PCI
compliance efforts

Service Features Solo Bronze Silver Gold Platinum Diamond

Access to Security Analysts

# of Inquiries Per Year n/a n/a 10 15 30 60
Routine Inquiries SLA n/a n/a 3 Bus. Days 3 Bus. Days 2 Bus. Days 2 Bus. Days
(>90% of total to date)
Extraordinary Inquiries SLA n/a n/a 1 Week 1 Week 1 Week 1 Week
Portal
Inquiry Tracking System n/a n/a √ √ √ √
PCI Program Planning Template √ √ √ √ √ √
PCI Knowledge Base √ √ √ √ √ √
Financial Risk Analysis Model √ √ √ √ √ √
Full Portal Licenses 1 1 5 5 10 25
Task Management Licenses 1 5 5 10 20 50
PCI e-Learning Licenses 1 5 5 10 20 50
PCI-Related News Bulletins
Quarterly PCI Newsletter √ √ √ √ √ √
Flash Updates √ √ √ √ √ √
Analyst Blogs √ √ √ √ √ √
Price
Annual Fees $1,900 $4,500 $10,000 $13,225 $21,500 $38,900

1834 Walden Office Square, Suite 150 * Schaumburg, IL 60173 * 847.221.0200 * www.halock.com
 847.221.0200 halock.com

Halock’s Information Security Services Divisions

Halock Security Labs Professional Service Offerings

Governance and Strategy Services Network and System Security Services

InfoSec Program Development  Centralized security management solutions
Virtual CISO/Security Council  Firewall solutions and Virtual Private Networks
ISO-27001 Registration Preparedness  Real-time Intrusion Prevention Systems
Policy & Procedure Development  Disaster recovery and business continuity services
Security Governance Planning  Virus and malicious mobile code protection
Incident Response Planning  Multi-factor authentication (tokens, biometrics, etc.)
DR/BC Planning & Strategy  Web/email filtering and reporting
 Operating system hardening

Assessment and Compliance Services Secure Application Services

 Risk Assessments  Application Firewalls
 PCI (Payment Card Industry) Compliance Services  Data Encryption
 Web application security auditing  Database security
 Vulnerability Assessments  SDLC Assessment
 Ethical Hacking  Source Code Reviews
 Social Engineering  Web Application Vulnerability Testing
 Wireless Security Testing  Application Security Tools Integration

8/30/07

1834 Walden Office Square Suite 150 * Schaumburg, IL 60173 * 847.221.0200 * www.halock.com