“With RSI Security, we feel like a valued client, not just another name in a book of customers. And that means a lot, especially when working with a small, but growing, company like Finix.”
- Gurpal Singh, Head of Compliance at Finix
Challenges
Financial technology (fintech) company, Finix, provides white-label payment infrastructure to payment facilitators, ISVs, and marketplaces, and therefore must be in compliance with PCI DSS regulations in order to protect sensitive cardholder data.
In 2017, as a growing company on-boarding more enterprise-tier clients, Finix needed a partner that would work with their existing Compliance and Security teams to streamline their PCI DSS efforts, as well as fill in any cybersecurity gaps that could be potentially exploited by hackers.
“Before we started working with RSI Security, PCI compliance was a difficult process for us,” recalls Gurpal Singh, Head of Compliance at Finix. “There were a lot of folks involved in our compliance efforts, but not everyone was aware of the depth and complexity of the regulations we were dealing with in terms of PCI DSS.”
Gather Information
The first steps that RSI Security and Finix took towards ensuring PCI DSS compliance were evidence gathering and documentation. The RSI Security team worked hand-in-hand with Finix’s Compliance team to organize and gather all of the necessary compliance-related documentation in a quick, painless fashion.
“We kicked off in late September, at which point RSI opened up the evidence portal for us to start uploading all of our documents and policy updates,” Singh recalls.
Onsite Assessment
“RSI Security then came on-site, and we were able to wrap up the documentation. We were just really happy to see that phase wrapped up so quickly.”
“That’s pretty impressive for a PCI audit,” observes Singh. “And we actually would have been done much faster, but wanted to conduct additional quality assurance testing before deploying the new environment to production.”
Compliance Assessment
The RSI Security team also conducted a full PCI DSS compliance assessment of Finix’s data, systems, and policies to identify any potential control gaps that needed to be filled in order to assure PCI DSS compliance.
Outcome
Today, Finix can assure all of its clients that its white-label payments infrastructure is 100 percent compliant with PCI DSS v3.2.1. Additionally, the engagement with RSI Security helped Finix strengthen its overall approach to cybersecurity.
“And what really meant a lot was that other assessors and auditors seemed very transactional in their approach, whereas with RSI Security there was an entire client-facing component that made us feel like a valued, long-term customer.”
- Gurpal Singh, Head of Compliance at Finix
LATEST
Case Studies
Tilly’s Case Study
“RSI Security helped us get policies and procedures ready, set us up to gather the evidence we needed, and then facilitated every step of the PCI assessment.”
Power Digital Case Study
“Constant communication. Weekly meetings. Went out of their way to be minimally intrusive to our business.”
Meltmedia Case Study
“RSI Security was the best conversation, had the most appropriate pricing, and was just the right amount of invasiveness for our organization.”
WorkWave Case Study
“We didn’t really have a ton of experience in payments compliance, But the RSI Security team was always patient with us, explaining what we needed. It really felt like they were along with us at every step to make sure we were successful.”
Finix Case Study
“With RSI Security, we feel like a valued client, not just another name in a book of customers. And that means a lot, especially when working with a small, but growing, company like Finix.”
CUSTOMERS
Organizations that trust RSI Security
