7Security

BACKGROUND

Please describe your company and position.

I am the Vice President of Information Security of Payhawk

Describe what your company does in a single sentence.

Financial services and expense management.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• Penetration Testing
• Security Compliance Certification

SOLUTION

How did you find 7Security?

Online Search

Why did you select 7Security over others?

Pricing first our budget, Good value for cost

What was the size of 7Security’s team?

10+

What was your primary form of communication with 7Security?

Virtual Meeting, Email or Messaging App

Describe the scope of work in detail. Please include a summary of key deliverables.

We are partnering for a number of years now with 7Security on our information security roadmap with penetration testing, security consulting and compliance certification services with PCIDSS, SOC and ISO audits and thus far we are more than happy with their approach and professionalism.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Achieved security certification effortlessly

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was done online and status tracked regularly; all tasks were delivered before the deadline or on time.

What did you find most impressive or unique about this company?

Hands-on approach, consulting but respecting your unique experience and situation.

Are there any areas for improvement or something 7Security could have done differently?

There was nothing they needed to do differently.

BACKGROUND

Please describe your company and your position there.

I am a CTO at Paynetics - we are a leader in B2B payments and a digital banking platform provider. We pioneer innovative and comprehensive payment solutions in card acquiring and issuing, account management, bank transfers and e-wallets. We are on a mission to simplify and democratise payments.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire 7Security?

We initially engaged 7Security to help us with our first PCI DSS compliance project. However, since 2018, 7Security has become a valuable partner we rely on to consult us on Information security standards and procedures. Besides our annual PCI DSS project, we have also procured an SCA audit, penetration tests, various information security trainings, and advisory services from them.

SOLUTION

How did you select this vendor and what were the deciding factors?

We made research online and selected several possible providers. 7Security stood out with their friendly approach, expertise and ‘out-of-the-box’ ideas, as well as their innovative solutions that saved us time and costs.

Describe the project in detail and walk through the stages of the project.

We have had several projects with the company, but the biggest one was our first PCI DSS compliance project. 7Security were well-aware that we didn’t have previous experience with the standard, so they took extra care in going over its requirements, making sure we understood them well and we are prepared for the next steps.

Then, they did a scoping validation, where they clarified our project scope and offered ways to optimise it so we can save costs and efforts in maintaining our in-scope environment. Once this was done, we had a clear understanding of what documentation and processes we needed to work on and provide.

7Security made sure this stage went smoothly and no questions remained unanswered. When we were ready, 7Security scheduled and performed a formal audit; then they prepared an Attestation of Compliance, an elaborate Report on Compliance and a certificate. In the meantime, their separate penetration testing team performed a pentest for us, since this is part of PCI DSS requirements. Overall, 7Security has developed a smooth process, with clear steps and objectives that is perfect for companies that are going through their first certification.

How many resources from the vendor's team worked with you, and what were their positions?

We had a QSA (Qualified Security Assessor), penetration tester, and account manager. The CEO was always available for advice or consultation as well.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Paynetics is now successfully certified in PCI DSS as Service Provider Level 1, which was incredibly important to us. We now provide a fully PCI DSS-compliant payment platform to our clients; our compliance with PCI DSS demonstrates that we have met the highest security standards, which is essential to our partners.

How effective was the workflow between your team and theirs?

7Security are quick to respond and have always been flexible during our projects - adapting to our speed, meeting our deadlines, and sending frequent reminders and updates. They have developed an easy-to-follow approach to PCI projects that ensured everybody is always up to speed. Whenever we needed help or advice, we found that 7Security are just one phone call away.

What did you find most impressive or unique about this company?

7Security is an auditing company that doesn’t feel like one. They really get into the individual business case and offer time and cost-efficient solutions and new innovative approaches. Moreover, they always raise the competence of the whole team during each project - they offer training whenever needed and are happy to explain and clarify anything. Since we started working together, they have become valued partners and friends.

Are there any areas for improvement or something they could have done differently?

Not really. They meet and exceed our expectations each time.