ADVISORY
Security Consulting
Expert guidance to strengthen your security posture.
Who it’s for
Organisations with obligations that reach past PCI DSS, or
with a specific decision they need independent input on.
At a glance
Service overview
Specialist assurance,
where and when
you need it.
Our Security Consulting services provide organisations with access to
experienced security professionals who deliver practical, hands-on support
across a range of security and compliance domains.
Our approach
Specialist assurance,
where and when
you need it.
Not every question needs a full assessment.
Sometimes you need an experienced analyst
alongside your team, or assurance work against a
different framework entirely.
01
PCI advisory and analyst support
Ongoing technical and compliance support to assist with PCI DSS implementation
and maintenance.
02
NZISM certification and accreditation
Guidance through New Zealand Information Security Manual (NZISM)
requirements and certification processes.
03
ISO/IEC 27001 consulting
Support for achieving and maintaining ISO 27001 certification, including ISMS
design and implementation.
04
Risk and privacy assessments
Delivery of security risk assessments and Privacy Impact Assessments (PIAs) to
identify and manage organisational risk.
Why Confide
Why organisations ask us
Assurance is all we sell. There is no product behind the advice, so the answer you get is the one we would want if it were our environment.
Qualified Security Assessor, certified by
the PCI Security Standards Council.
Independent view
Assurance is all we sell, so there is nothing else we are
steering you towards.
Extra capacity
Experienced analysts alongside your team when
workload spikes.
Beyond PCI DSS
NZISM, ISO 27001, risk and privacy work under
one relationship.
Common questions
Straight answers, before
you commit.
Ask us anything you would rather not put in
an email.
Yes. We work across NZISM certification and accreditation, ISO/IEC 27001, security risk assessments and privacy impact assessments.
Small. Some engagements are a few days of analyst support or a single independent review of a control design. We scope to the question.
Other services
Assurance across your whole programme.
-
Read More: Assessment & attestation
Assessment
Assessment & attestation
End-to-end support to achieve and validate PCI DSS compliance.
-
Read More: PCI DSS managed assurance
Programme
PCI DSS managed assurance
An ongoing programme that keeps you compliant between assessments.
-
Read More: Managed Vulnerability Scanning
Scanning
Managed Vulnerability Scanning
End-to-end vulnerability scanning to meet PCI DSS requirements.
-
Read More: Cardholder data scanning
Discovery
Cardholder data scanning
Identifying and reducing cardholder data risk.
-
Read More: Policies, procedures & training
Capabilty
Policies, procedures & training
Building a strong compliance and security foundation.
Why Confide
Related reading.
Practical guidance from our assessors on what the Standard actually asks of you, written for New Zealand merchants and service providers.
Hosted checkout, iframe or direct post: what each does to your scope
Most organisations we assess have chosen their online payment integration for commercial…
Tell us what you are
trying to decide.
Book a call with a Qualified Security Assessor. You will speak
to the person who would run your assessment, not an
account manager.