Collection and mapping of evidence in the Report on Compliance template. Update RAIL with any open items and provide to the Customer. Exit Meeting (remote or onsite): A mandatory session (one (1) to two (2) hours) at the conclusion of all major on-site assessments. This critical communication point will include a verbal report of all issues that were identified during onsite testing, as well as an overview of the next steps in the process. Customer Required Activities: The Customer will schedule all necessary interviews with personnel prior to Coalfire’s arrival onsite. The Customer is responsible for ensuring all necessary personnel are available for interviews in the time Coalfire has scheduled to be onsite. Interviews completed or outside of the onsite time are not included in this Service Order and will require a Change Order. The Customer will ensure all necessary personnel are available for the onsite meeting and exit meeting. If a Customer individual cannot make it to one or either meeting, the Customer is responsible for communicating action items with those individuals. If additional meetings are required or requested by the Customer, Coalfire will provide a Change Order for this request and the meeting(s) will be scheduled based on mutually available time. Coalfire Required Activities and Deliverables: Upon completion of onsite validation activities, Coalfire will deliver an updated RAIL to the Customer. Deliverables The RAIL will contain outstanding information, evidence, and documentation to complete the assessment activities. Confirm the final documentation review cut-off date. Coalfire Required Activities: The remote validation phase is where Coalfire will document the Report on Compliance with all information as provided to date. Coalfire will compare and document the onsite activities with the evidence and documentation as provided in RFI 1 and 2. All areas where there are discrepancies will be noted in the Report on Compliance or RAIL as applicable. Remote Validation As the part of this phase, Coalfire conducts a third QA Checkpoint to review the draft Report on Compliance and confirm that all issues and open data requests as reflected in the RAIL are comprehensive and accurate. Customer Required Activities: Availability to answer Coalfire questions as provided in email or phone calls. Coalfire Required Activities and Deliverables: Upon completion of remote validation activities, Coalfire will deliver an updated RAIL to the Customer. Deliverables The RAIL will contain outstanding information, evidence, and documentation to complete the assessment activities.
Collection and mapping of evidence in the Report on Compliance template. Update RAIL with any open items and provide to the Customer. Exit Meeting (remote or onsite): A mandatory session (one (1) to two (2) hours) at the conclusion of all major on-site assessments. This critical communication point will include a verbal report of all issues that were identified during onsite testing, as well as an overview of the next steps in the process. Customer Required Activities: The Customer will schedule all necessary interviews with personnel prior to Coalfire’s arrival onsite. The Customer is responsible for ensuring all necessary personnel are available for interviews in the time Coalfire has scheduled to be onsite. Interviews completed or outside of the onsite time are not included in this Service Order and will require a Change Order. The Customer will ensure all necessary personnel are available for the onsite meeting and exit meeting. If a Customer individual cannot make it to one or either meeting, the Customer is responsible for communicating action items with those individuals. If additional meetings are required or requested by the Customer, Coalfire will provide a Change Order for this request and the meeting(s) will be scheduled based on mutually available time. Deliverables Coalfire Required Activities and Deliverables: Upon completion of onsite validation activities, Coalfire will deliver an updated RAIL to the Customer. The RAIL will contain outstanding information, evidence, and documentation to complete the assessment activities. Confirm the final documentation review cut-off date. Remote Validation Coalfire Required Activities: The remote validation phase is where Coalfire will document the Report on Compliance with all information as provided to date. Coalfire will compare and document the onsite activities with the evidence and documentation as provided in RFI 1 and 2. All areas where there are discrepancies will be noted in the Report on Compliance or RAIL as applicable. As the part of this phase, Coalfire conducts a third QA Checkpoint to review the draft Report on Compliance and confirm that all issues and open data requests as reflected in the RAIL are comprehensive and accurate. Customer Required Activities: Availability to answer Coalfire questions as provided in email or phone calls. Deliverables Coalfire Required Activities and Deliverables: Upon completion of remote validation activities, Coalfire will deliver an updated RAIL to the Customer. The RAIL will contain outstanding information, evidence, and documentation to complete the assessment activities.
PCI%20Assessment%20Services.docx