PCI DSS Level 1

Overview

PCI DSS Level 1 is the highest compliance tier, applicable to service providers that store, process, or transmit more than 300,000 credit card transactions per year. Level 1 compliance requires an annual on-site assessment by a Qualified Security Assessor (QSA) and quarterly network scans by an Approved Scanning Vendor (ASV). CodeMiners maintains Level 1 compliance for all payment processing services, providing the maximum level of assurance to clients and card brands.

Governing Body

PCI Security Standards Council (PCI SSC)

Scope of Certification

All PCI DSS requirements apply, with the additional requirement of a full on-site QSA assessment rather than self-assessment. Covers all payment processing infrastructure, applications, and supporting systems.

Audit and Assessment Process

An on-site assessment is conducted annually by a QSA. The assessor produces a Report on Compliance (ROC) documenting testing procedures, evidence, and findings for all 12 PCI DSS requirements. Quarterly ASV scans and annual penetration testing are mandatory.

Key Requirements

1. All 12 PCI DSS requirements at the highest validation level
2. Annual on-site QSA assessment producing a Report on Compliance (ROC)
3. Quarterly external vulnerability scans by an ASV
4. Annual internal and external penetration testing
5. Attestation of Compliance (AOC) signed by a QSA

Compliance Entitlements

• Highest tier of PCI DSS compliance for service providers
• Annual on-site assessment by a Qualified Security Assessor
• Quarterly network vulnerability scans by an Approved Scanning Vendor
• Recognized by all major card brands as the gold standard for payment security

Client Benefits

• Provides the highest available assurance for payment data security
• Eliminates the need for clients to independently validate CodeMiners' payment security controls
• Satisfies card brand requirements for Level 1 service providers

Related Certifications