Kit de arquitectura de soluciones de pago
Diseñar sistemas de pago: ISO 20022, open banking, adquirencia de tarjetas, libro mayor, alcance PCI DSS y registro de terceros TIC.
8 plantillas en 2 pasos, en el orden en que se usan. Abre cualquier plantilla en el editor, complétala y expórtala a PDF, DOCX o HTML.
Diseños de referencia
ISO 20022 Payments Design Template (CBPR+, SEPA, Fedwire)
CompletaISO 20022 payments solution: scheme register, message set and versions, flows, canonical model, structured and hybrid address, identifiers, truncation, screening, VoP, reconciliation, cutover
ISO 20022; Swift CBPR+ (SR2026 payments changes deferred); EPC SEPA rulebooks; Regulation (EU) 2024/886Open Banking API Design Template (PSD2, FAPI 2.0)
CompletaOpen banking dedicated interface: PSD2/RTS, PSR and PSD3, FiDA and CFPB 1033 status, API standard choice, FAPI 2.0 controls, consent life cycle, SCA, TPP certificates, dashboards, reporting
PSD2 and RTS (EU) 2018/389; FAPI 2.0 Security Profile (Final 2025); NextGenPSD2 1.3.16; UK Open Banking 4.0.1Card Acquiring Payments Design Template (3-D Secure, PCI DSS)
CompletaCard acquiring design: parties, 3-D Secure flow, SCA exemptions, network tokens, fraud, chargebacks, PCI DSS scope, interchange and fee reconciliation
EMV 3DS 2.2.0 to 2.3.1.1; PCI DSS v4.0.1; Delegated Regulation (EU) 2018/389Payment Ledger System Design Template (Reference Design)
CompletaPayments and double-entry ledger: idempotency keys, payment state machine, PSPs, outbox, reconciliation, audit, PCI DSS scope
PCI DSS v4.0.1 and SAQ A (Jan 2025) cited by requirement number only; ISO 4217; RFC 9457; draft-ietf-httpapi-idempotency-key-header-08 (I-D)API Security Review Template (OWASP API Top 10 2023, ASVS 5.0)
CompletaAPI scope, method and rating, inventory and shadow endpoints, trust boundaries, API1 to API10 review, ASVS 5.0 API checklist, findings, decision, retest
OWASP API Security Top 10 2023; OWASP ASVS 5.0.0
Regulación y cumplimiento
PCI DSS Scoping and Segmentation Design Template (v4.0.1)
CompletaCard data flows and inventory, scope categories, component register, tokenisation and P2PE, segmentation controls and tests, TPSPs, TRAs, scope confirmation
PCI DSS v4.0.1 (structure and requirement numbers only); PCI SSC scoping and segmentation supplementsDORA Register of Information Template (ICT Third-Party Arrangements)
CompletaDORA Art. 28(3) register: templates B_01.01 to B_99.01, arrangements, providers and LEI/EUID, supply chain ranks, functions, assessments, concentration, exit
Regulation (EU) 2022/2554 (DORA) Art. 28 to 30; Implementing Regulation (EU) 2024/2956Fraud Risk Assessment Template (GAO Framework, UK Failure to Prevent Fraud)
CompletaScope and size test, governance, scales, scheme inventory, inherent and residual scoring, anti-fraud controls, override, analytics, six principles, actions
GAO-15-593SP Fraud Risk Framework; GAO Green Book 2025 Principle 8; ECCTA 2023 s.199
Más kits: Seguridad, sectores regulados e industria
Kit de arquitecto de soluciones bancarias
9 plantillasKit de soluciones sectoriales y reguladas
15 plantillasKit de programa de seguridad de aplicaciones
13 plantillasKit de ingeniería de seguridad
11 plantillasKit de arquitecto de identidad y seguridad
10 plantillasKit de cadena de suministro de software segura
18 plantillas