3Key has a deep expertise in designing and operating PCI P2PE compliant systems. Therefore, GPE decided to engage 3Key to assist with the design and implementation of the project needed to achieve the PCI P2PE compliance and certification.  

Payment service compliant with PCI P2PE standard is a comprehensive solution, however broken down into various components, which can be assessed independently by the P2PE assessor. In the case of this project the overall solution was split between the GPE and its customer (a major global petroleum company). 3Key first had to define the scope of the PCI P2PE components, which were part of the GPE scope. These then had to be assessed to define their status vis-a-vis the PCI P2PE standard. The result was documented in a GAP analysis and subsequent design of the security controls that were needed to comply with the standard. These security controls, policies and related procedures were designed in a close cooperation with the customer’s technical team and were overall tailored to the existing technical solution and resources. This way it was possible to achieve the delivery of PCI P2PE compliance in the most efficient way and save effort and resources on GPE side. Using experience from previous similar project, the designed controls and documentation enabled GPE to streamline the compliance assessment process.  The customer representatives especially valued the cooperation by the presentation of the systems to the PCI assessor, where the experience and competence of the 3Key specialist proved invaluable.