G2

Timothy R. C.

Global Cybersecurity and Information Technology Leader

Mid-Market (51-1000 emp.)

9/24/2026

"Clear, Efficient PCI DSS 4.0.1 Guidance That Kept Our Recertification on Track"

5/5

What do you like best about 360 Advanced?

What I like best is the expertise and the partnership approach. Our auditor, Adam Lassa, knows PCI DSS deeply, including the finer points of 4.0.1. He explained requirements in plain, practical terms instead of just pointing to the standard. Adam treated our assessment as a collaboration, not a checkbox exercise. He took the time to understand how ISC2 actually handles payments, then tailored his guidance to our environment. He was responsive whenever we had a question and kept the process organized and on schedule. As a security leader who manages several compliance frameworks at once, I value a partner who makes the process easier and leaves us better prepared for the next cycle. Adam and the 360 Advanced team did exactly that. Review collected by and hosted on G2.com.

What do you dislike about 360 Advanced?

Honestly, there is very little to dislike. If I had to name something, it would be that I wish we had engaged them sooner. Their team brought a level of clarity and efficiency that would have made our earlier assessment cycles easier. Every interaction was professional and responsive, and they respected our time. Communication was clear throughout, deadlines were met, and there were no surprises. For an organization balancing PCI DSS alongside ISO 27001 and other compliance obligations, that kind of reliable, low-friction partnership is exactly what we need. Review collected by and hosted on G2.com.

Recommendations to others considering 360 Advanced:

I would recommend 360 Advanced without hesitation, especially to organizations whose PCI DSS environment spans more than one payment channel or SAQ type. My advice is to involve them early. Their scoping guidance up front saves time and prevents surprises later in the assessment. Come prepared with a clear picture of how payments flow through your organization, and take advantage of their expertise by asking questions. Adam and the team are generous with their knowledge and help you understand the reasoning behind the requirements, not just what to check off. If you're looking for an assessor who is thorough and practical and makes the compliance process easier, 360 Advanced is a ultimate choice. Review collected by and hosted on G2.com.

What problems is 360 Advanced solving and how is that benefiting you?

As a global nonprofit that accepts card payments both online and through staff-assisted transactions, ISC2 needs to validate PCI DSS compliance across two different payment channels, each with its own Self-Assessment Questionnaire (SAQ A for our outsourced e-commerce payments and SAQ C-VT for virtual terminal transactions). The transition to PCI DSS 4.0.1 added new requirements and interpretation questions, and getting scoping and SAQ eligibility right is critical. A mistake there can mean unnecessary work or, worse, a compliance gap.

360 Advanced helped us solve that problem. Their team confirmed our scope and SAQ applicability, walked through the 4.0.1 changes that affected us, and gave clear, practical guidance on evidence and control expectations. The result was an efficient assessment that let us complete our PCI DSS 4.0.1 recertification on schedule in September 2026 without pulling my team away from other priorities for long. Just as important, we came away with confidence that our payment environment is properly scoped and defensible, which matters to our leadership, our payment partners, and the members who trust us with their data. Review collected by and hosted on G2.com.