DATASHEET

Archer PCI Management®

Use case for IT & Security Risk Management

The Challenge
For as long as credit cards have been a payment method of choice for consumers, there havebeen opportunities for fraud and identity theft. The rapid expansion of the global online marketplace
coupled with the fragmentation of the payment process across multiple entities (merchant,service provider, credit processing entity) has created greater risk of criminals accessing andmisusing customer information. Managing that risk requires organizations to establish robust
enterprise-level security programs.
The Payment Card Industry Data Security Standard (PCI DSS) defines a consolidated set ofsecurity best practices endorsed by major card brands that are designed to reduce fraud
risk associated with credit card processing. Organizations that fail to comply lose the ability toparticipate in credit card processing programs, likely impacting their ability to conduct business.
Maintaining an effective PCI DSS compliance program can be a costly business requirement.
Organizations that gain efficiencies by optimizing operational compliance efforts will be more
successful in reducing compliance costs and gaps.

Overview
Archer PCI Management enables organizations to streamline the compliance process, simplify
stakeholder participation, and reduce overall compliance effort and cost. It allows organizations
to jumpstart a PCI compliance program by conducting continuous assessments and providing
visibility for managing and mitigating risk.
®

Archer PCI Management guides merchants through the completion of relevant selfassessment
questionnaires (SAQs). It also provides packaging and export of compliance program results andattestation articles in a properly formatted PCI Report on Compliance (ROC) for easy submissionand review.

Features• Easy-to-use, project-based workflows to manage cardholder data environment (CDE) scoping and multiple, ongoing compliance assessments.
• Structured content libraries link the PCI DSS to an extensive control.
• Testing repository ensures full coverage in driving internal or external assessment activities.
• Persona-driven dashboards and questionnaires simplify the attestation and evidence-gathering process and provide clear insight into		 compliance activity status.
• Aggregated issues management functionality tracks findings and gaps and manages remediation activities.
• One-click reporting template assembles deliverables in a properly formatted ROC.

Benefits
With Archer PCI management, you can:
• Gain end-to-end visibility across all		 PCI-relevant business process risk		 and compliance activities.
• Reduce time spent researching		 requirements and chasing stakeholder		 responses and evidence.
• Increase control testing accuracy,		 completeness and reporting coverage.
• Leverage enhanced issues tracking,		 with all issues automatically		 consolidated into a combined view.
• Utilize extensive reporting options for		 current and historical PCI performance.

About Archer
Archer is a leading provider of integrated risk management (IRM) solutions that enable customers to improve strategic decision-making
and operational resilience with a modern technology platform that supports qualitative and quantitative analysis driven by both businessand IT impacts. As true pioneers in GRC software, Archer remains solely dedicated to helping customers manage risk and compliancedomains, from traditional operational risk to emerging issues such as ESG. With over 20 years in the risk management industry, theArcher customer base represents one of the largest pure risk management communities globally, with more than 1,200 customers
including more than 50% of the Fortune 500.
Visit www.ArcherIRM.com.

@ArcherIRM

Archer Integrated Risk Management©2023 Archer Technologies LLC. All rights reserved. Archer and the Archer logo are registered trademarks or trademarks of Archer
Technologies LLC in the United States and other countries. All other trademarks are the property of their respective owners. Archer
believes the information in this document is accurate. The information is subject to change without notice. 10/23 Data Sheet.