Peer case
A flag change, a smaller card box
How and who for the hotel job—verified when attested.
Job: Audit PCI after a franchise flag change
Weeks
Verified11
PMS replaced
Verifiedno
SIEM bought
Verifiedno
Claim
PCI gap closed without replacing the PMS or buying a SIEM.
Evidence
Owner-signed card-flow diagram; watch live 20 days after the flag flip.
Caveat
The franchise scanner was still submitted. It was not the audit.
Situation
A new soft brand arrived with a scanner PDF and a booking path that still hit the old call-center tape. The GM had 11 weeks before the brand audit.
Approach
Folio Security traced cards through PMS, POS, and the leftover tape. Scope was a one-page owner diagram. The PMS stayed; the path shrank. Folio Watch went live on the new path. The franchise scanner was filed as theater and still submitted.
Outcome
PCI gap closed in 11 weeks without replacing the PMS. Owner signed the diagram. Watch live within 20 days of the flag flip. No SIEM was purchased.
“They told me the brand scan was a PDF. Then they made the real box smaller.”
Who did the work
- 8.7
- 8.4
- 8.3