REAP Achieves PCI DSS Compliance and Security

Key customer outcomes

Undertook scope reduction to deliver cost savings

Achieved PCI DSS Compliance

Enhanced Operational Efficiency

Services

Governance, Risk & Complaince

Industry

Technology

Client Requirements

Reap is a financial technology company that provides a payment platform used by both individuals and businesses to pay expenses. Reap wanted to ensure that the storing, processing and transmission of its customers’ Card Holder Data (CHD) complied with the Payment Card Industry Data Security Standard (PCI DSS)

Implementation

We commenced the assessment by focusing on the scoping assessment. The key objective was to reduce the PCI DSS footprint to streamline Reap’s compliance obligations and reduce the time and effort needed to achieve compliancy. Using the gathered insights, a compliance and security framework was established to define governance policies, management responsibilities, and operational processes to ensure Reap not only achieved compliance but also maintained it. 

Impact

Reap successfully achieved PCI DSS compliance, an achievement that attests that Reap stores, processes, and transmits CHD in compliance with this standard and maintains security of its CHD. The adoption of this standard has assisted Reap in executing its built-up compliance framework.  

“We needed someone who would take into account the state of Canva as it was before we started this project. Not only the state of our security and risk management maturity at the time, but also very importantly, the culture of the organisation. Privasec (Sekuro founding company) was very good at this. They had a high level of expertise, are very communicative and we had incredible engagement.” 

Geoff Chiang 
Security Governance, Risk & Compliance Manager. Canva

Explore More Case Studies

Sports & Entertainment

Mount Faber Leisure Group

Contact Us

Discover the Smarter Way to Transform Your Organisational Security – Connect with Our Experts Today.

Complete the form and we will get in touch within 24 hours.