1. For loan service providers and payment software developersPCI & PA DSS compliance serviceBen Oguntala, LL.B Hons, LL.M, BVC (IPR) IT LAW Consultant & Compliance Specialist Ben.oguntala@riesgoriskmanagement.com07812 039 867www.riesgoriskmanagement.com

2. Service overviewDataSupplier PCI DSSPA DSS Protection ISO27K Management Magnetic stripe, cardAct verification code or valueProtect card holder Build & MaintaindataRegistration with IS policies &secure networkthe ICOSecureproceduresNo. of SuppliersauthenticationProtect Definition ofLog paymentbusiness purposescardholder data application activityIS baselinesNo. ofMaintain vulnerabilityDevelop secure Information payment applicationsInformation Asset managementRegistersharedprogrammeProtect wirelesstransmissionsIncident Information managementstrong accessVulnerability testingin applicationsharing controlSupplieragreement Secure networkcontractsRisk Network Cardholder data Management Privacy Impactmonitoring & storageAssessment testsRemote access security Maintain Encryption of nonSupplierInformation Security console accessPrivacy Policies and Risk treatmentAudits procedurespolicy Implementationguide 3. Our servicesPCI DSS compliance Carry out audits Gap analysis Implement project to fill in the gaps Implement risk management tool Provide risk assessment and risk treatment service (monthly/bi-weekly/ad-hoc)PA DSS compliance Software assessment audit and gap analysis Development of your implementation guideline for clients Re-use PCI DSS and ISO27001ISO 27000 compliance Use of www.riesgoriskmanagement.com ISO27K compliance reporting toolData Protection Act compliance Implementation of your Privacy policy and strategy Business purpose definition Data retention policyFSA Data security Data security standard Data leakage prevention Encryption policySupplier management and Audits 3rd party self audits IS schedule in Supplier contracts 4. Compliance overviewOrganisationGenericManagementcompliance structureGovernance Risk Networkand compliance architecture Policies and proceduresServicesofferedClientsYourYourPCI DSS PA DSSorganisation application 5. Protect AccessVulnerabilityBuilding a cardholder control managementsecuredata Accesscontrol policy of networkSegmentation PCI DSS firewalls Different Security baselines 6. contact details Ben Oguntala Ben.oguntala@riesgoriskmanagement.com www.riesgoriskmanagement.com 07812 039 867