NCC Group
NCC Group is a global cybersecurity firm headquartered in Manchester, UK, operating a PCI QSA practice across regions. Its published materials describe enterprise PCI assessments alongside deep penetration-testing and security-research capabilities — a natural fit for organizations that want the assessor to think like an attacker.
At a glance
| Headquarters | Manchester, United Kingdom |
|---|---|
| Founded | 1999 |
| Firm type | QSA company (QSAC); global cybersecurity firm |
| ROC planning range | $60K–$150K+ (planning estimate (Sept 2026)) |
| Typical fieldwork window | 6–12 wk |
| Frameworks (per firm) | PCI DSS, pen testing, managed detection, escrow, SOC 2 |
| Official website | nccgroup.com |
Best fit
Global enterprises and companies operating across multiple regions.
Before you engage
Enterprise-grade pricing and process; smaller merchants may find leaner QSAs a better fit.
Questions about NCC Group
Is NCC Group an accredited QSA company?
NCC Group operates as a QSA company (QSAC); global cybersecurity firm. Only a Qualified Security Assessor employed by an accredited QSA company can perform an on-site PCI DSS assessment and sign a Report on Compliance — confirm the firm's current QSA status on the PCI SSC's assessor listings before engaging.
What frameworks does NCC Group support?
Per the firm's public materials: PCI DSS, pen testing, managed detection, escrow, SOC 2.
How do I get pricing from this firm?
QSA fees are scoped per engagement and almost never published. Use our quote request to get a scoped fee from NCC Group and comparable QSA companies.
Get a scoped quote
QSA fees depend on your size, scope, and readiness. Get comparable quotes from NCC Group and similar accredited QSA companies.
Request quotes from NCC Group & peersFree · No obligation · Takes 2 minutes
Alternatives to NCC Group
Comparable QSA companies buyers also evaluate — same buyer profile, different trade-offs:
Coalfire Systems
QSA company (QSAC) · $60K–$150K+
Schellman
QSA company (QSAC) · $50K–$120K
A-LIGN
QSA company (QSAC) · $40K–$100K
Compare quotes from these firms
One request reaches the firms above — scoped quotes, free, no obligation.
How it works: tell us once (4 questions, 2 min) → we match accredited QSA companies to your size and scope → they send scoped quotes directly. Free, no obligation.
← All QSA companies · PCI DSS cost guide · RFP & quote worksheet