PCI PCI Community PCIDSS PCI DSS v4.0 PCI Requirements

Hey PCI Champions! Don’t Breathe a Sigh of Relief Just Yet Congratulations on snagging your v4.0 Report on Compliance (ROC) and Attestation of Compliance (AOC)! You might be thinking, “...

Security PCIDSS4.0 PCI Requirements OBS Global PIN QPA/PIN

Are you an acquirer or processor that manage PIN data, a vendor that provides systems that handle PIN data, or a merchant that stores, processes, or transmits PIN data? If so, you will want...

Security PCIDSS4.0 PCI Requirements OBS Global encryption

Prepare for a transformative shift in cardholder data security with PCI DSS v4.0. With native disk encryption no longer a shield, organizations worldwide must swiftly adapt, revisiting...

Security PCI RSP PCIDSS4.0 PCIDSS PCI DSS v4.0 OBS Global

2023 is flying by. Before you can say March 2024, v3.2.1 of the PCI DSS will be retired. Do you know what your organization needs to do to cross the v4.0 finish line, and how much time it...

Security InfoSec PCIDSS4.0 Payment Card Industry Network Breach Unpatched Systems Patch

Despite the significant changes introduced with PCI DSS v4.0, there are many bedrock requirements that did not change. This article serves to highlight an often neglected, but extremely...

Security PCI RSP PCIDSS4.0 PCIDSS PCI DSS v4.0

Three steps to avoiding the new "In Place with Remediation" status and using the seven P's to help -- prior proper planning prevents p*#s poor performance!

Security PCI Passwords DSS CDE Network Security secure operations PCI DSS v4.0 multi factor authentication mfa remote access QSA

MFA under v4.0: No more admin bypass. And no more accessing the CDE without it. Start now and make sure you’ve got the time to set up MFA correctly, and securely. Your users will thank...

PCI PCIDSS4.0 PCI Assessment PCI DSS v4.0

One of the most significant changes introduced in PCI DSS v4.0 involves the documented approach for performing internal vulnerability scans. The internal vulnerability scanning requirement...

PCI PCIDSS4.0 PCIDSS PCI DSS v4.0

There are two notable changes that may require a fair bit of runway to fully meet the existing requirement to monitor your critical security control systems.

PCIDSS4.0

What could possibly go wrong with calling out a non-compliant status, or “In Place with Remediation,” on your Attestation of Compliance? Do you have a storm brewing you are yet aware of?