PCI Compliance for Focus
Payment card industry (PCI) compliance is mandated by credit card companies to help ensure the security of credit card transactions in the payments industry. It exists to protect cardholders from having their sensitive card data stolen and subsequently used without their consent.
As a merchant who is qualified to accept card payments, you must attest to your compliance, regardless of how much or how often you accept credit cards, even if not at all!
This guide will assist you with the login and profile questions for your business. This form will not provide answers to the questionnaire and only the merchant can complete the questionnaire. We are not authorized to complete this questionnaire for you and this is not legal or compliance advice.
You should expect this form to take about 45-90 minutes to complete.
This applies if you're using any of the following products:
- Integrated Point-of Sale
- E-Commerce Website (fully/partially developed by yourself or third-party developer)
Step-by-Step Guide:
Step 1 - Login to MX Merchant
Click the link in the email from norely@mxmerchant.com or go to www.mxmerchant.com
You must use the Google Chrome web browser. Other web browsers are not fully supported for all features and may cause technical issues.
Then, login using your existing username and password. If you forgot your password, click the "Forgot Password" link to reset. If you forgot your username or are having another issue/error, call or email us:
Step 2 - Select Location
If you only have one location, skip to Step 3.
If you have more than one location, verify you are connected to the right account. You may have to edit your "Location". To do this, select the 
in the top right-hand corner. Select "Edit" next to "Location". A pop-up will appear. Search for the correct location by name. Select the checkbox next to the correct location and hit "Save".
Please note, that many merchants have both an in-person, “Brick & Mortar” account as well as an online, “e-Commerce” account. Ensure you have the proper account selected before you begin.
Step 3 - Enable Application
In the lefthand menu, select 
. A grid layout will appear.
Navigate to the app titled "Sysnet Global Solutions". On the app, in the lower righthand corner, select 
.
An activation confirmation message will appear. Select "OK".
A green bar will appear at the top of your web browser window confirming the app has successfully been activated.
On the app, you should now see the 
button where the 
button was before. This means the app is now activated.
Step 4 - Create Your Account
The application has been activated, but you must create an account. For security, you will be required to re-login after creating your account for the first time.
Hover over the Sysnet app with your mouse. Click 
. You will be redirected to a webpage at https://pciprotection.com.
Create a username and password by selecting "Register" and following the prompts.
A pop-up confirming you are integrating your compliance into your online portal will appear. Select "Allow". You will be redirected back to the "Apps" page of your MX Merchant account.
Like before, hover over the Sysnet app with your mouse. Click .
Step 5 - Complete Your Compliance
Your dashboard will show “Not compliant” and three boxes for:
- Your Business Profile
- Be Scan Compliant
- Complete Security Assessment
You'll start with the business profile. Correctly answering the business profile is critical – if the wrong profile is selected, your security assessment or “questionnaire” will not be accurate to your business.
Step 6 - Business Profile
Under "Your business profile", select "Manage".
Follow the prompts. If you are using the integrated point-of-sale, complete the following:
Q: Relationship with third-party service providers?
A: Yes
Q: Select Your Merchant Type
A: Enter Business Category via Filter
Note: Some categories are not readily searchable in the filter. For example, “Restaurant” is found under “Eating Places” and “retail” is not available generically, you’ll have to specify types of good/services. “Miscellaneous Business Services” is also available if an appropriate category is not available.
Q. Select Your Processing Method
A: (Check all that apply)
If using, POS – select “POS Terminal”
Q: Does your company use a Qualified Integrator & Reseller (QIR)?
A: Yes
A new section will appear below. Enter the following information:
Name of QIR Company: INGAGE
QIR Individual Name: Jay Harms
Description of services provided by QIR: Point-of-Sale
Q: Does your business electronically store credit card numbers?
A: Yes.
Qualifications
Q: Does your business use or allow any remote administrative access?
A: Yes.
Q: Does your company have a wireless network connected to the cardholder data environment?
A: No.
Eligibility
Integrated POS should be “Self-Assessment Questionnaire D” or “SAQ-D”
Q: Do you agree with all of the above statements?
A: Answer truthfully according to your business.
If the resulting SAQ bullet points do not match your business, please email us to review together: support@ingageipayments.com
Move on to the next step. Select the logo or "Home" button if needed.
Step 7 - PCI Scan
Under the "Be scan compliant" section, select "Manage".
Select "Schedule scan". 
Your IP address will populate in the gray bubble. If you are at the location of the business, this is the business' IP address.
If you are not at the business, you must get the local IP address from the business. This can be done via Google and searching, "What is my IP address"***
For "Scan Date", enter today's date. You can also set it
for any time in the near future.
Scans can take 24-72 hours to run.
Set "Load Balancer?" to "No".
Under "Sysnet access", check the box at the bottom and select "Schedule Scan".
Step 8 - Finish Questionnaire
Under "Complete security assessment", select "Manage".
Follow the prompts. Select "Click to start your questionnaire".
The last question requires our scan to be done and passed.
All other questions are the responsibility of the merchant and must be answered according to the business’ unique handling of processing and policies. You will receive an opportunity to change your answers at the end. Once passed, you will have a copy of your certificate available for download.
Merchants will be required to answer "yes" to all questions in order to pass! This is to certify that the questions regarding compliance and security are true for your business. Please answer honestly.
There is a toggle at the top of the page that allows you to sort your “yes” and “no” answers. This is to allow you to look through those questions that you answered “no” to, to update your business processes or policies and return to the page to mark them as “yes”.
You will not be allowed to submit your questionnaire if all answers are not marked as “yes”.
Additional help resources are available on the Sysnet website. Additionally, the phone number for Sysnet support is located on the website screen in the upper right hand corner and is available for your use. A PCI compliance expert can assist you with questionnaire answers.
Unfortunately, as your Qualified Integrator Reseller (QIR) we cannot answer these questions for you and we encourage all businesses to answer the questions thoroughly and honestly.
Step 9 - Confirm Scan and Finish Questionnaire
Sysnet will send you an email confirming your scan PASS or FAIL. It will go to the email on file (used earlier). Please check junk/spam as these emails are automated.
If your scan is a FAIL – call our support team at (612)-861-5277 or email us at support@ingageit.com. Our I.T. support group will need to review your network and scan results to assist you. You will need to follow their direction and proceed with another scan.
If your scan is a PASS – log back into Sysnet and complete the final question of the questionnaire. This is the last step for compliance for the year. You can download a copy of your compliance for your records. Congratulations on your compliance and savings.
