Kerson Wallaw
400-3 Place Ville Marie, Montréal QC H3B 2E3
Ph: (514) 312-1555
Book a free consult
Pick a time · Request a callback

Accreditations you can verify.

Compliance is only as credible as the people who sign the report. These are the recognitions and capacities behind each Kerson Wallaw division, and how you can check them.

Recognitions

What stands behind our work.

The accreditation and certifications we hold, and the partners who issue what we cannot.

Accreditation

PCI SSC Qualified Security Assessor company

Ubitrak, a QSA company since 2011.

Recognized by the PCI Security Standards Council to assess organizations against PCI DSS. QSA companies requalify with the Council and are listed in its public directory.

  • PCI Security Standards Council
  • QSA company since 2011
  • PCI DSS assessments

Individual certifications

Certified people lead the work

Personal credentials, renewed every year.

Every PCI DSS assessment is led by an assessor individually qualified by the PCI SSC. Our president, James Barnard, also holds the PCIP, CISA and CISM certifications. Verify them below.

  • QSA (PCI SSC)
  • PCIP (PCI SSC)
  • CISA (ISACA)
  • CISM (ISACA)

Assessment scope

Interac security assessments

For organizations on the Interac network.

Ubitrak assesses organizations against Interac’s security requirements, often alongside PCI DSS so evidence is collected once.

  • Interac security requirements
  • Combined with PCI DSS fieldwork

Partnership

SOC and CSAE 3416 with CPA firms

Attestation reports are issued by licensed CPAs.

Ubitrak prepares organizations and supports the audit; our CPA partner Mallette performs the engagement and issues the SOC 1, SOC 2 or CSAE 3416 report.

  • CPA partner: Mallette
  • SOC 1 · SOC 2
  • CSAE 3416

Partnership

Approved Scanning Vendor

External scans by a PCI SSC-approved vendor.

Quarterly external vulnerability scans are performed with a global Approved Scanning Vendor, then scheduled and tracked in the Ubitrak Audit Portal.

  • ASV approved by the PCI SSC
  • PCI DSS requirement 11.3.2

Readiness

ISO/IEC 27001

Preparation for certification.

Ubitrak prepares organizations for ISO/IEC 27001. Certification itself is granted by an accredited certification body.

  • ISO/IEC 27001:2022
  • Certified by accredited bodies
Verified credentials

Check our credentials.

Badges and registry listings you can confirm yourself, directly with the organizations that issue them.

Ubitrak · Company

PCI SSC Qualified Security Assessor company

Issuer
PCI Security Standards Council
Listed
Place of business: Canada, Europe

Choose “Ubitrak” in the company search.

PCI Qualified Security Assessor (QSA) badge

James Barnard · President

PCI Qualified Security Assessor (QSA)

Issuer
PCI Security Standards Council
Certificate
206-852
Valid until
2027-09-06

On PCI SSC, search “Barnard, J”.

Payment Card Industry Professional (PCIP) badge

James Barnard · President

Payment Card Industry Professional (PCIP)

Issuer
PCI Security Standards Council
Certificate
1008-245
Valid until
2027-09-12

On PCI SSC, search “Barnard, J”.

ISACA CISA badge

James Barnard · President

Certified Information Systems Auditor (CISA)

Issuer
ISACA
Badge issued
2019-05-17

Verified by ISACA through Credly.

ISACA CISM badge

James Barnard · President

Certified Information Security Manager (CISM)

Issuer
ISACA
Badge issued
2023-05-18

Verified by ISACA through Credly.

Each credential is confirmed by the issuing organization on its own site. Some registries do not offer a direct link, so we show what to search for.

By division

Capacity across the group.

Each division brings its own expertise; all of it is backed by the same auditors.

Ubitrak
PCI DSS, Interac, ISO 27001 readiness, SOC with CPA partners, penetration testing and ASV scans. Learn more →

Accel PCI and Accel GRC
Compliance portals built on Ubitrak’s assessment experience and supported by Montreal experts. Learn more →

KW Consulting
IT project delivery and remediation, validated by the auditors who will check the result. Learn more →

Verify, don’t take our word for it.

QSA companies are listed publicly by the PCI Security Standards Council. Search the PCI SSC QSA directory →

Team certifications (for example CISSP, CISA or CISM) will be listed here once confirmed.

Book a free consult

Know where you stand in 30 minutes.

Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.

    Step 1 of 4 · What do you need?

    Step 2 of 4 · Scope (all optional)

    Step 3 of 4 · How should we reply?

    Suggest up to three times that suit you. We confirm one by email.

    Step 4 of 4 · About you

    Also email me (optional)

    Please do not send passwords, card numbers or other sensitive data in this form.

    This website stores cookies on your computer. Cookie Policy