Implementation for Nigeria’s Leading Bank

Level 1 commercial banks in Nigeria providing accessible payment portals, platforms, for different levels of merchants across manufacturing, educational, technological, energy, logistics, asset management, and insurance.

We followed the PDCA methodology to solve the challenge. In the Plan stage, we defined the scope, developed an assessment plan, and set clear objectives. The Do stage involved conducting a gap assessment, reviewing documentation, interviewing process owners, validating evidence, and supporting the mandatory requirements across people, processes, and technology. During the Check stage, we focused on remediation efforts to address gaps. Finally, in the Act stage, we implemented continual monitoring, improvement initiatives, and prepared for certification readiness.

The level 1 banks got compliant with PCIDSS version 4.0.1 and were able to meet up with regulatory requirements thus building trust, earning competitive advantage and became more resilient to card data cyber related attacks.

PCIDSS compliance should not be seen as a check-all-boxes activity but rather seen as a culture across people, processes and technology.