PCI SSC Qualified Security Assessor · SOC audits with Mallette · 365 merchants on Accel PCI since 2018
Certified auditors, compliance software and IT experts working as one team. A QSA company since 2011, helping Canadian businesses meet their security obligations for over 25 years.
Ubitrak · Audits and certification
A PCI QSA company since 2011, with 80 assessment clients in 7 countries. PCI DSS, Interac, SOC 2 with CPA firms, ISO 27001, ASV scans and penetration tests, all tracked in the Ubitrak Audit Portal.
Accel PCI · Self-serve PCI compliance
A guided web portal that takes merchants to their PCI DSS compliance certificate in six steps, with a pre-filled questionnaire and a clear to-do list. No support hours or surprise charges.
Accel GRC · Governance, risk and compliance
One portal to manage your cybersecurity obligations: Quebec’s privacy law, PCI DSS and your clients’ security requirements. Includes an internal audit report, training and document templates. Built and supported by Montreal experts.
Each standard answers a different question, from your bank, your clients or the law. Here is what each one asks of you, and where we help.
PCI DSS
Card data security, required every year if you take card payments.
The payment card industry’s security standard. If you store, process or transmit card data, you must comply every year, through a self-assessment questionnaire or an on-site audit by a QSA. Ubitrak is a QSA; Accel PCI handles the questionnaire.
ISO 27001
The international standard for managing information security.
The international standard for managing information security. Certification shows clients and partners that your security is planned, measured and improved over time. Ubitrak prepares you for it.
SOC 2
A CPA firm’s report on a service provider’s security controls.
A report by a CPA firm on a service provider’s security controls, often requested by North American clients. Ubitrak prepares you and works with the CPA firms that issue the report.
Interac
Security requirements for connecting to the Interac network.
Security requirements for organizations connected to the Interac network. Ubitrak performs Interac assessments, often alongside PCI DSS.
Privacy law (Law 25)
Quebec’s rules for handling personal information.
Quebec’s privacy law requires a person in charge of personal information, privacy impact assessments and a register of confidentiality incidents. Accel GRC helps you track these obligations.
Security testing
Proof your systems resist attack: scans and penetration tests.
Most standards require proof that your systems resist attack: ASV scans, internal and external penetration tests, wireless and application tests.
If you take card payments, PCI DSS applies to you. If you sell services to other companies, they will ask for proof of security. Ubitrak has certified these sectors since 2011, along with retailers, government ministries and municipalities.
Travel and hospitality
Travel agents, tour operators, hotels and restaurants meeting PCI DSS as required by IATA or their acquirer.
Payment service providers
Processors and gateways certifying for PCI DSS, Interac and CSAE 3416, with one team for all of it.
Call centres
Phone and mail-order payments, in Canada and abroad. Certified by Ubitrak since 2011.
E-commerce
Online merchants and platforms, from dozens of transactions a day to millions.
Unattended payments
Payment terminals, service stations, parking management and pay stations.
Financial institutions
Interac and PCI assessments by QSAs who have worked inside banks.
One clear mandate, weekly follow-up, no surprises at audit time.
One contract, one point of contact, no finger-pointing between vendors.
They come from starting too late and not knowing what the assessor will ask. We fix both.
If you store, process or transmit card data, your acquirer expects PCI DSS compliance every year. Enterprise clients ask for a SOC 2 or ISO 27001 report before they sign. Connecting to Interac comes with its own security assessment. Miss a deadline and you risk non-compliance fees, stalled contracts or losing the ability to take card payments.
Two portals you run yourself, or a team that does it with you. All three are backed by the same auditors.
Not sure which one fits?
Kerson Wallaw is a Montreal group of companies in cybersecurity and compliance, at 3 Place Ville Marie. Its divisions — Ubitrak, Accel PCI, Accel GRC and KW Consulting — share one bilingual team of auditors, advisors, engineers and developers. Ubitrak has been a PCI QSA company since 2011.
Book a time
Choose a 30-minute slot with one of our senior auditors. You’ll speak with the people who run the audits, in English or French.
Request a callback
Leave your number and a good time to call. A senior member of the team will call you back, in English or French.
Reach us directly
- Phone(514) 312-1555
- Emailmarketing@kersonwallaw.com
- ChatChat with our team →
- Office400-3 Place Ville Marie, Montréal QC H3B 2E3
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.