Accreditations you can verify.
Compliance is only as credible as the people who sign the report. These are the recognitions and capacities behind each Kerson Wallaw division, and how you can check them.
What stands behind our work.
The accreditation and certifications we hold, and the partners who issue what we cannot.
Accreditation
PCI SSC Qualified Security Assessor company
Ubitrak, a QSA company since 2011.
Recognized by the PCI Security Standards Council to assess organizations against PCI DSS. QSA companies requalify with the Council and are listed in its public directory.
- PCI Security Standards Council
- QSA company since 2011
- PCI DSS assessments
Individual certifications
Certified people lead the work
Personal credentials, renewed every year.
Every PCI DSS assessment is led by an assessor individually qualified by the PCI SSC. Our president, James Barnard, also holds the PCIP, CISA and CISM certifications. Verify them below.
- QSA (PCI SSC)
- PCIP (PCI SSC)
- CISA (ISACA)
- CISM (ISACA)
Assessment scope
Interac security assessments
For organizations on the Interac network.
Ubitrak assesses organizations against Interac’s security requirements, often alongside PCI DSS so evidence is collected once.
- Interac security requirements
- Combined with PCI DSS fieldwork
Partnership
SOC and CSAE 3416 with CPA firms
Attestation reports are issued by licensed CPAs.
Ubitrak prepares organizations and supports the audit; our CPA partner Mallette performs the engagement and issues the SOC 1, SOC 2 or CSAE 3416 report.
- CPA partner: Mallette
- SOC 1 · SOC 2
- CSAE 3416
Partnership
Approved Scanning Vendor
External scans by a PCI SSC-approved vendor.
Quarterly external vulnerability scans are performed with a global Approved Scanning Vendor, then scheduled and tracked in the Ubitrak Audit Portal.
- ASV approved by the PCI SSC
- PCI DSS requirement 11.3.2
Readiness
ISO/IEC 27001
Preparation for certification.
Ubitrak prepares organizations for ISO/IEC 27001. Certification itself is granted by an accredited certification body.
- ISO/IEC 27001:2022
- Certified by accredited bodies
Check our credentials.
Badges and registry listings you can confirm yourself, directly with the organizations that issue them.
Ubitrak · Company
PCI SSC Qualified Security Assessor company
- Issuer
- PCI Security Standards Council
- Listed
- Place of business: Canada, Europe
Choose “Ubitrak” in the company search.

James Barnard · President
PCI Qualified Security Assessor (QSA)
- Issuer
- PCI Security Standards Council
- Certificate
- 206-852
- Valid until
- 2027-09-06
On PCI SSC, search “Barnard, J”.

James Barnard · President
Payment Card Industry Professional (PCIP)
- Issuer
- PCI Security Standards Council
- Certificate
- 1008-245
- Valid until
- 2027-09-12
On PCI SSC, search “Barnard, J”.

James Barnard · President
Certified Information Systems Auditor (CISA)
- Issuer
- ISACA
- Badge issued
- 2019-05-17
Verified by ISACA through Credly.

James Barnard · President
Certified Information Security Manager (CISM)
- Issuer
- ISACA
- Badge issued
- 2023-05-18
Verified by ISACA through Credly.
Each credential is confirmed by the issuing organization on its own site. Some registries do not offer a direct link, so we show what to search for.
Capacity across the group.
Each division brings its own expertise; all of it is backed by the same auditors.
Ubitrak
PCI DSS, Interac, ISO 27001 readiness, SOC with CPA partners, penetration testing and ASV scans. Learn more →
Accel PCI and Accel GRC
Compliance portals built on Ubitrak’s assessment experience and supported by Montreal experts. Learn more →
KW Consulting
IT project delivery and remediation, validated by the auditors who will check the result. Learn more →
Verify, don’t take our word for it.
QSA companies are listed publicly by the PCI Security Standards Council. Search the PCI SSC QSA directory →
Team certifications (for example CISSP, CISA or CISM) will be listed here once confirmed.
Know where you stand in 30 minutes.
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.