We use cookies to give you the best browsing experience and to help us understand how you use our site. Cookies are small snippets of data stored on your computer and some have already been set. By continuing to use our website you are accepting our use of cookies. To find out more, read about cookies

Please note

We cannot answer specific queries about your account here. For Account queries please

Can't find the answer?

Email Us

Your selected question

I don’t want to use Barclaycard Data Security Manager online service; where can I get a PCI DSS Self-Assessment Questionnaire (SAQ) from?

We found a high number of Merchants who completed the Self-Assessment Questionnaire (SAQ) via the DIY option were not completing the forms correctly and remaining non-compliant without knowing it. This was putting the Merchants in unnecessary danger of security breaches and card scheme fines which we would not have been able to defend. It is for this reason that we must insist that merchants use our service to either complete the PCI DSS process online, or upload their SAQ, Attestation of Compliance (AoC), and passing quarterly network scans (if required) that a Qualified Security Assessor (QSA) has validated. Merchants who have already enrolled with Security Metrics are not required to upload their documents. Alternatively if you have an Internal Security Assessor (ISA) or are multi-acquired and have certification that has been completed via either of those routes, these documents should be uploaded too.

How useful did you find the answer given?

Not at all Very useful