PCI compliance is a yearly check that your office keeps card data safe. Prahsys fills in most of the questionnaire for you, so it only takes a few minutes. Learn how to open the questionnaire, answer the pre-questions, submit and sign, and download your certificate.
What This Video Covers
Opening the questionnaire — Click PCI Compliance in the sidebar to open the questionnaire in a new tab. Learn more →
Answering the pre-questions — Prahsys answers the questions about your payment setup. You answer the eight about your office's own policies and training.
Submitting and signing — Submit the questionnaire Prahsys has already filled in, confirm how you take payments, and sign the attestation.
Downloading your certificate — Save your Certificate of Compliance, and see how to renew next year with Rapid Renew.
Video Transcript
Video Transcript
Welcome to Prahsys Tutorials. In this tutorial, you'll learn how to open the questionnaire, answer the pre-questions, submit and sign, and download your certificate. PCI compliance is a yearly check that your office keeps card data safe. Prahsys fills in most of it for you.
Click PCI Compliance in the sidebar. The questionnaire opens in a new tab. The first page confirms how your office takes payments. It's already set up for Prahsys card terminals. Click Confirm.
Prahsys has already answered the questions at the bottom, about your payment setup. The eight shaded questions are yours, because they're about your office's own policies and training. They ask about a security policy you review with your staff each year, an incident response plan, checking your devices for tampering, rules for portable devices, and security awareness training. Each one needs a Yes. If any of these isn't in place yet, put it in place first. The links in the first and third questions download free templates for a security policy and an incident response plan. Once all eight are answered, scroll down and click Submit.
Prahsys has already answered every question on this page, so don't change anything. Click Submit My Questionnaire at the top. Here, I use a mobile terminal is already selected. That's the right choice for Prahsys practices, so just click Submit. Now sign the attestation. Type your name in Attested by and your job title in Title. Your practice name is already filled in. Click Complete My Questionnaire.
That's it. You're compliant for the next twelve months. Click Download Certificate to save a copy. It shows your practice, the questionnaire, who signed it, and the date it was issued. Next year, you'll get an email reminder before it expires. Come back the same way. If nothing has changed, Rapid Renew takes you through it in a few steps. That's how to complete your PCI compliance in Prahsys. If you have questions, click the chat bubble in the bottom corner of your dashboard, then Send us a message. Our support team is happy to help. Thanks for watching Prahsys Tutorials.
Quick Steps
Open the questionnaire
Click PCI Compliance in the left sidebar, under Merchant. The questionnaire opens in a new tab, on our PCI compliance portal (powered by MAXpci). Learn more →
On the Eligibility page, click Confirm. It's already set up for the way Prahsys practices take payments.
Answer the pre-questions
The questions at the bottom of the page, about your payment setup, are already answered by Prahsys. Leave them as they are.
Answer Yes to each of the eight shaded questions at the top. They cover your office's own policies and training:
A security policy that keeps cardholder data secure, with access limited to the people who need it
Reviewing that security policy with all staff at least once a year
An incident response plan
An incident response plan that sets out everyone's security roles, including notifying the card brands
Staff trained to keep a list of your card devices, inspect them, and report any tampering
Rules for using portable devices, including which staff may use them
A security awareness program reviewed with all staff
Security awareness training that covers phishing and social engineering
Click Submit at the bottom of the page.
Quick Tip: Each of the eight needs to be a Yes. If one isn't in place at your office yet, put it in place before you answer. The links in the first and third questions download free templates for a security policy and an incident response plan. You can also find both under Policies at the top of the portal.
Submit and sign
On the Questions page, don't change anything: Prahsys has already answered every question. Click Submit My Questionnaire in the banner at the top.
On the SAQ C Situation page, I use a mobile terminal is already selected. That's the right choice for Prahsys practices. Click Submit.
On the Attestation page, type your name in Attested by and your job title in Title. Your practice name is already filled in.
Click Complete My Questionnaire.
Important Note: The attestation is a legal statement that your practice meets PCI DSS. It should be signed by someone authorized to represent your practice, such as the owner or office manager.
Download your certificate
Download Certificate — Click it to save your Certificate of Compliance. It shows your practice, the questionnaire (PCI SAQ C), who signed it, and the date it was issued.
Valid for twelve months — You'll get an email reminder before it expires.
Rapid Renew — Next year, open PCI Compliance the same way. If nothing has changed, click Rapid Renew on the portal's Dashboard to renew in a few steps.
Non-compliance fee — If your PCI compliance lapses, a $25 monthly PCI non-compliance fee is added until you complete it.
Need Help? Contact Prahsys Support at [email protected] or call 1 (833) 222-6834.