Web-based service for the payment card industry In 2008, a new version, version 1.2, of the Payment Card Industry Data Security Standard (PCI-DSS) was released. Credit card companies like Visa and MasterCard require that businesses that handle credit card data are compliant with this standard. This means that banks have to ensure that all connected merchants comply with this standard. Version 1.2 of the PCI-DSS introduced the obligation of a yearly self-assessment through a self-assessment questionnaire. Banks and other acquirers typically have between 100 and 1,000,000 merchants, who all need to fill out a questionnaire of 11-262 questions and fax it to the bank/acquirer.Applicant VOC-Consultancy B.V. identified the need for a new product. Local partner VOC-Solutions D.O.O. developed a web-based questionnaire and a tool to analyse the status of filled out questionnaires. Within the PSI project the partners will exploit this solution, with additional services including a customer support desk and the option to do risk based compliance analyses on completed questionnaires. Banks and other acquirers will be the customers for these services.The partners will not set up a new company, yet will execute the project within VOC-Solutions D.O.O. in Sarajevo.Corporate Social Responsibility (CSR)Partners will formalise policies on workplace health and safety, environmental management and implement an employee standard.Impact•	Employment and working conditionsBy the end of the project 9 new jobs will have been created, 3 medium-level and 6 high-level jobs. Two years later a total of 19 medium- and high-level jobs will have been created, plus one basic-level job (cleaning, reception, etc).The partners will pay their employees on average 20% more than similar positions in other companies. A HRM policy will be in place, including paid overtime, a fair amount of vacation days, a personal training budget, the option to work part-time and a workplace health and safety plan. Fringe benefits offered are a contribution towards transport and for a daily meal (both maximum allowed by law). Once they reach the size of 15 employees, they can and will also offer their employees an additional health care insurance and dental health plan.•	Innovation/Transfer of knowledgeThe emphasis of the knowledge transfer will be on knowledge about the Payment Card Industry and PCI Data Security Standard. All employees will receive basic training on PCI DSS, provided by VOC-Consultancy BV. Some key personnel will attend an advanced training on this subject. Training will also be given on secure IT architecture, secure programming and ISO 27001.The knowledge on PCI DSS in Bosnia and Herzegovina is very limited. Banks in Bosnia and Herzegovina are not really aware of PCI DSS.•	Chain effectsBecause of the small size of the local company and the nature of this project, expected chain effects are very limited. VOC-Solutions D.O.O. is a big promoter of the PCI Data Security Standard. If they would be able to create awareness at Bosnian banks it could improve the safety of card payments in the country.•	EnvironmentGiven the nature of the project, very limited impact on the environment is to be expected. Nevertheless, VOC-Solutions D.O.O. will strive to be a paperless office, like VOC-Consultancy B.V.. This will be formalised in an office policy to minimise environmental impact. This policy will at least include statements on using minimal amounts of paper and use power saving equipment.Furthermore, the web-based application will save lots of faxing paper as merchants will no longer need to fax their questionnaires to the acquirers. Setting up a company structure for the exploitation of a web-based software tool for banks, where their customers can once a year prove their compliancy to the Payment Card Industry Security Standard, with a maximum of 50,000 licences per year.