Dale M. Rapp

About Dale M. Rapp

I\'m Dale Rapp, an experienced PCI DSS Assessor and a leader in Governance, Risk, and…

Experience

1. Sr IT Audit & Compliance Specialist - Pci

   Mercy

   Nov 2022 — Present · St Louis, MO, US

   Manage the PCI Compliance program, including coordinating all activities and the collection of evidence for the yearly PCI assessment. Consulted on any PCI topics, such as acquisitions, payment channel revisions, payment device replacements, and third party validation. Worked with stakeholders to revise and improve key documents, such as the payment data flows, service provider responsibility matrix, network diagrams, and various policies and standards. Performed the PCI version 4.0 gap analysis and lead effort to prioritize and remediate the findings. Educate business stakeholders on the PCI-DSS standards, security controls, and validation procedures. Coordinated with the QSA to create project requirements, objectives, schedules, and collection of the evidence for the yearly level 1 merchant PCI assessment. Ensure that any third-party service providers Mercy works with also adhere to PCI standards, and regularly review their compliance status and maintain the service provider responsibility matrix. Served as the project lead and coordinated the collection of evidence and scheduled the interviews for the SOC2 and ITGC audits.