Ask for a walkthrough
Menu

About Normatiq

Built from what auditors ask for.

Normatiq's founder has led PCI DSS assessments since 2018. The two tools come from that work: what an auditor asks to see, and what firms find hard to show.

Ask for a walkthrough
The companyCompanies House
Registered name
NORMATIQ LTD
Company number
17510693
Registered in
England and Wales
Incorporated
9 October 2026
Registered office
2nd Floor College House, 17 King Edwards Road, Ruislip, London HA4 7AE
Contact
info@normatiq.io

What Normatiq makes

Two tools for the audit.

The discovery tool finds where your card data, personal data and health data are. The platform shows where you stand on each PCI DSS v4.0.1 requirement, and on Cyber Essentials.

Other standards are planned extensions.

Data discovery   The platform

Readiness by requirement · PCI DSS v4.0.1Example
12.5.2PCI DSS scope is documented and confirmed every 12 monthsScope confirmed by you on 2 Sep 2026 · 14 systems in scope, 3 connectedIn place
8.4.2Multi-factor authentication (MFA) for all non-console access into the cardholder data environment3 accounts without itNot in place
11.6.1Changes to payment pages are detected and reportedNeeds evidence from youNot checked
Wording paraphrased from PCI DSS v4.0.11 in place · 1 not in place · 1 not checked

The founder

Moshiul Islam Mishu

Founder and Director, Normatiq Ltd

Moshiul Islam Mishu founded Normatiq in October 2026. He has led PCI DSS assessments since 2018, and built the platform from what assessors ask for and what firms find hard to show.

From 2007 to 2018 he worked in IT audit and information security: at KPMG in IT advisory, at Eastern Bank and Prime Bank in IT and information security, and at Robi Axiata as General Manager, IT Audit.

Qualifications and recognitionYear
  • PCI QSA
  • CISSP, ISC22015
  • CISA, ISACA2011
  • CFE, Association of Certified Fraud Examiners2015
  • ISO/IEC 27001 Lead Auditor, PECB2019
  • ISC2 Asia-Pacific Information Security Leadership Achievements honouree2016
  • Founding President, ISC2 Dhaka Chapter2021
  • BA (Hons) Accounting and Computer Science, London Metropolitan University2006

Where Normatiq stops

It prepares you. Your QSA assesses.

Normatiq gets you ready for the audit. It does not assess you and it does not certify you.

  • The platform does not change your accounts

    It observes configuration. It does not alter it.

  • The discovery tool acts only when you tell it to

    What to keep, move or delete is yours to decide.

  • Your QSA decides what is accepted

    The platform files the evidence. Your QSA tests it.

  • A certification body certifies

    For Cyber Essentials, only a body licensed by IASME issues the certificate.

See it on your own case.

Ask for a walkthrough, or write with a question about the company.

Ask for a walkthrough

The button opens an email to info@normatiq.io.