Indicative pricing. Final scope, deliverables, independent third-party costs and timing are confirmed in the applicable engagement documentation.
Target implementation and compliance programme: approximately 90 days. Multiple workstreams may be undertaken in parallel. Actual completion timing depends on scope, remediation needs, customer readiness and third-party auditor/certification-body processes.
PCI DSS includes vulnerability and penetration-testing requirements for applicable in-scope environments.
ISO/IEC 27001 and ISO/IEC 27701 certificates are issued by independent certification bodies, SOC 2 Type II reports by independent auditors; Swiss AMF coordinates and supports this work but does not issue certificates, and no certification outcome is guaranteed. GDPR and CCPA are compliance programmes, not certifications.