Practically Secure PCI QSA Services

PCI security, led by someone the industry already calls "The PCI Guy"

Practically Secure evaluates security programs against the Payment Card Industry Data Security Standard (PCI DSS) and tells entities exactly where they stand, in plain language, without the theater

Listed by the PCI Security Standards Council | Qualified Security Assessor | Decades of PCI assessment experience

What is Practically Secure?

It is Secure Ideas’ dedicated PCI security practice, built around hands-on assessment experience rather than a checklist.

Practically Secure exists so that entities handling payment card data have a straightforward way to find out where they actually stand against the PCI DSS, and what to do about those results. No vague scoring, just a clear read on the environment as it exists today.

The practice is led by Jeff Man, who is widely known across the industry simply as “the PCI Guy”. Jeff is listed among the PCI Security Standards Council’s Qualified Security Assessors (QSA), and he has spent decades evaluating security programs for retailers, processors, and service providers of every size, which is exactly the experience Practically Secure is built on.

How we help your entity get there

We tailor the program to your needs, based on the kinds of transaction and PCI requirements that most affect your organization.
We typically start with the following:

PCI Security Assessments

We perform a full evaluation of your environment against the PCI DSS, covering cardholder data flows, scope boundaries, and the effectiveness of the controls already in place.

Self-Assessment Support

Hands-on guidance through a Self-Assessment Questionnaire, ensuring that the answers reflect the systems you are really running in the environment, and not just what the form assumes.

Scope and Applicability Advising

The team helps to define things that genuinely fall in scope for the PCI DSS before a single control gets reviewed. We help you put your effort into the places it matters most.

Controls Advising

Our consultants provide practical, specific recommendations for closing gaps, written for the people who have to implement them, not just the people who have to read them.

Jeff Man

Executive Director of PCI

Meet the PCI Guy

Jeff has spent decades inside the PCI Security Standards Council’s community, listed as a QSA. He is known across the payments industry for a direct, no-nonsense read on what actually keeps card data safe.

He built Practically Secure around one core idea: A security program should hold up in practice, not just on paper. Entities that work with Jeff get a straight answer about where they stand and a clear path for what comes next.

Practically Secure Expert PCI Services: We provide an evaluation of your security program against the PCI Data Security Standard, covering PCI security assessments, self-assessment support, and advising on scope, applicability, and controls.

Reach Jeff Directly

Use the form to tell us a bit about your entity, your PCI concerns and needs, and where things stand today.

Jeff reviews every message himself and will follow up to talk through next steps.

Following the smoke?

Here for the cigars? We won’t tell the auditors.
Register for CigarCon.