INNOTECH / ASV SCANS
Run external vulnerability scans and organise your next steps through our portal. With Innotech alongside your team, from defining the scope to rescanning.
Your workflow in one portal
LESS COMPLEXITY. A CLEARER VIEW.
Connect ASV Scans with your wider PCI DSS compliance process. Keep the information you need together, so you can see where you stand and what comes next.
Manage your ASV Scans through PCI Manager, focused on the systems within your agreed scope.
Follow the results and organise remediation with your technical team, with a clear view of the findings.
Access your scan history and reports, and continue the process from the same place.
PLAN BEYOND YOUR NEXT SCAN
Vulnerabilities change, and so do your systems. You need a repeatable process that connects scanning, remediation and evidence.
Talk to us about ASV ScansWhere the ASV requirement applies, external scans are needed at least once every three months. Leave time for remediation and rescanning.
Start with the externally accessible addresses and systems within your environment, so the scan covers what actually needs to be assessed.
Keep scan reports and remediation history organised for the reporting requirements of your acquirer or compliance programme.
FROM THE FIRST SCAN TO YOUR NEXT STEP
Start with the systems and external addresses that need to be included in the scan.
Use PCI Manager to manage the scan and follow its status.
Your technical team makes the required changes, with our guidance on the PCI DSS process.
Check again after making changes and retain the relevant reports for your compliance process.
YOUR TEAM + INNOTECH
Whether you have your own technical team or need help coordinating the process, we discuss your environment and a way of working that suits your business.
Talk to us about ASV ScansASV SCANS & PCI DSS
External vulnerability scans in the context of PCI DSS requirements.
External scanning is considered where ASV requirements apply. Defining the scope and managing findings are important steps.
A passing scan does not, on its own, establish full PCI DSS compliance. Talk to us about its role in your compliance process.
An external vulnerability scan performed by an Approved Scanning Vendor for the relevant PCI DSS requirements. It checks systems in the agreed scope for known vulnerabilities and produces the corresponding report.
Where the requirement applies, at least once every three months, including necessary remediation and rescanning. Significant changes also require additional scanning; the appropriate scan type and scope are confirmed separately.
Your team reviews the findings, makes the necessary changes and rescans. PCI Manager helps you follow progress while we discuss the next steps in the process with you.
Outsourcing payment processing alone does not establish whether ASV scanning is required. We look at your payment flow, website, applicable SAQ and business scope.
A scan documents the outcome of that particular scan. Overall compliance also requires meeting the other applicable PCI DSS requirements.
LET’S GET ORGANISED
Tell us what your business needs. We will discuss your scope, using PCI Manager and the next steps for ASV Scans.
Already have a technical team? We can work directly with them.
+30 210 600 66 66