PCI DSS assessments for companies in Ireland
1 Sequence Cyber Ltd is a PCI SSC-listed Qualified Security Assessor (QSA) company for Europe. Our QSAs, Ron Williams and Venkata Kamala Bandepalli, carry out PCI DSS v4.0.1 assessments for merchants and payment service providers in Ireland, including ROC, AOC and SAQ support. Assessments are delivered in English. Scoping calls are free.PCI SSC-listed QSA company for Europe (verify on the PCI SSC QSA list) · ISO 27001 and ISO 9001 certified · Quarterly ASV scans through Qualys, a PCI SSC Approved Scanning Vendor
What is different in Ireland
- Many payment and e-money institutions serving customers across the EU are authorised in Ireland. The Central Bank of Ireland supervises them, and DORA has applied to them since 17 January 2025.
- Ireland has not yet passed its NIS2 law. The National Cyber Security Bill is still being drafted, and the European Commission referred Ireland to the EU Court of Justice in July 2026. Until the Bill is enacted, the existing NIS1 rules still apply to designated operators.
- The Data Protection Commission (DPC) enforces GDPR and is the lead authority for many companies with their EU headquarters in Ireland.
- English is an official language, so interviews, evidence and the ROC all work in English with no translation step.
How to choose a PCI DSS QSA in Ireland
- Check the PCI SSC QSA list for the Europe region.
- If you passport payment services across the EU, ask how the assessment covers operations in other countries.
- If you are supervised by the Central Bank of Ireland, ask how PCI DSS evidence will be reused for DORA.
- Ask how the QSA will help you prepare for NIS2 obligations before the Irish Bill is enacted.
Frequently asked questions
Does NIS2 apply in Ireland yet?
Not directly. Ireland's National Cyber Security Bill has not been enacted, so NIS1 rules still apply to designated operators. Many firms are preparing now, because the Bill will bring the directive into Irish law.
Can a UK-based QSA company assess an Irish business?
Yes, if PCI SSC lists it for the Europe region. 1 Sequence Cyber is listed for Europe.