USA for IOM
RSI Security helped nonprofit leader USA for IOM achieve PCI compliance and build a secure digital fundraising foundation.
“Despite our limited technical knowledge, RSI made the process approachable by explaining requirements in plain language and helping us understand what was needed from our vendors and systems.”
– Sonia Agnesod, Planning, Coordination and Compliance, USA for IOM
The Challenge
USA for IOM is the U.S. nonprofit partner of the International Organization for Migration (IOM), the UN agency responsible for migration. Their mission is to raise awareness and mobilize support for humanitarian and development initiatives that improve the lives of migrants and displaced communities globally.
With a small but passionate team, USA for IOM plays a pivotal role in funding life-saving programs and amplifying the voices of vulnerable populations.
RSI Security
The Challenge: Achieving PCI Compliance for Digital Fundraising
When USA for IOM set out to accept digital donations independently for the first time, one major hurdle stood in their way: achieving Payment Card Industry (PCI) compliance. In the past, donation platforms and data systems were handled by a much larger partner organization. But this year, USA for IOM needed to stand on its own.
With a team of just four—and no dedicated IT staff—the organization faced:
- A steep learning curve in understanding PCI DSS requirements
- Tight internal resources and capacity
- A complex, evolving compliance landscape
- High urgency to meet donor expectations and support growing fundraising needs
This wasn’t just a checkbox exercise. It was critical infrastructure for funding life-changing work around the world.
RSI Security
The Solution: Turning Complexity Into Clarity
RSI Security played a critical role in helping USA for IOM overcome these challenges and build a secure, compliant donation platform from the ground up.
From the initial kick-off meeting, RSI Security brought clarity and structure to a process that initially felt overwhelming. Even without internal IT resources, the USA for IOM team was empowered every step of the way. Here’s how:
- Clarifying Requirements: RSI translated complex PCI DSS standards into plain language, ensuring every team member understood what was needed and why.
- Vendor Engagement: They guided vendor communications, facilitated outreach, and interpreted technical responses.
- Assessment Readiness: RSI helped draft assessment responses, provided detailed annotations, and reviewed supporting evidence.
- Documentation & Policy Support: Their experts helped develop PCI-compliant policies and controls tailored to USA for IOM’s unique needs.
- Vulnerability Remediation: When security gaps surfaced, RSI offered actionable steps to resolve them quickly.
- Sustaining Morale: The team provided ongoing encouragement and partnership, turning a stressful audit into a valuable learning experience.
Together, these efforts built not just compliance—but a confident, secure foundation for long-term digital fundraising.
RSI Security
The Outcome: Successful PCI Certification and New Capabilities
Despite limited internal resources and a fast-approaching deadline, USA for IOM achieved full PCI compliance—with several lasting benefits:
- Secure acceptance of digital donations as an independent nonprofit
- Quarterly vulnerability scanning and long-term compliance scheduling
- Clarity on renewal timelines and vendor expectations
- Robust policies and documentation aligned to industry best practices
- Increased donor confidence and readiness for future fundraising growth
This success wasn’t just a milestone—it was a transformation. Key to that transformation were RSI Security team members Kavya Prakash, Peter Phaneuf, and Patrick Murphy, whose leadership and expertise elevated the entire engagement. Their clear communication, proactive support, and steady guidance turned what could have been a daunting audit into a valuable learning experience. Thanks to their partnership, the USA for IOM team emerged stronger, more confident, and fully prepared for ongoing compliance.
Compliance for a Greater Cause
USA for IOM began its PCI journey with a small team, limited technical resources, and a major goal: securely accepting digital donations independently for the first time. Working closely with RSI Security, the organization translated complex PCI requirements into practical steps, strengthened policies and security controls, addressed vulnerabilities, and established the documentation and processes needed to support compliance.
The result was more than a successful PCI engagement. USA for IOM gained a secure foundation for digital fundraising along with a clearer understanding of how to maintain its security program moving forward. With recurring scanning, defined responsibilities, and stronger processes in place, the organization can focus more of its resources on supporting its mission while giving donors greater confidence in the systems protecting their contributions.
THE CLIENT PERSPECTIVE
Their team was consistently organized, responsive, and proactive… Their dedication made all the difference in our success.”
Sonia AgnesodPlanning, Coordination and Compliance, USA for IOM
Explore Our Case Studies
Epic Games
GamingManaging PCI compliance across a global gaming ecosystem required both immediate changes and a plan for what came next. Epic Games strengthened its architecture, streamlined assessments across international teams, and established a sustainable approach to maintaining PCI compliance long term.
Macomb Community College
EducationA complex higher education environment called for a more unified approach to cybersecurity. Macomb Community College built stronger governance, implemented CIS Controls, and established a roadmap its teams could sustain long term.
Lumistry
HealthcarePreparing for HITRUST meant turning hundreds of requirements into a manageable security program. Lumistry streamlined the process while building a stronger foundation for ongoing compliance and security.
Turn Your Security Challenges Into Success
Every organization’s security and compliance journey looks different. RSI Security brings the expertise, guidance, and practical support needed to navigate complex requirements, reduce risk, and build a stronger security program around your organization’s goals.