PCI DSS SME
Consulting
Dec 11, 2023 · 12 min read · As outlined in sub-requirements of the other 11 requirements, documenting expectations of the security posture of an organization is fundamental to the success of the organization. Creating a strong information security policy sets the tone, and por...
Join discussion
Dec 10, 2023 · 8 min read · System vulnerabilities can serve as an open door for attackers to walk right into secure systems and cause significant harm. The best prevention method is to consistently test system components, processes, and software to ensure the security controls...
Join discussion
Dec 9, 2023 · 7 min read · Logging mechanisms and tracked user activities are critical to preventing, detecting, or minimizing the impact of a data compromise. Implementing logs on all system components and in the cardholder data environment (CDE) allows thorough tracking, ale...
Join discussion
Dec 8, 2023 · 7 min read · While many organizations may prioritize the digital security measures needed to protect cardholder data, physical securities shouldn’t be forgotten. All physical access to cardholder data (or systems that interact with it) must be restricted to ensur...
Join discussion
Dec 7, 2023 · 8 min read · PCI DSS Requirement 8 provides detailed guidance on the two fundamental principles for identifying and authenticating users: establishing the identity of a person through an identifier, and verifying the identity of the user. The first principle is ...
Join discussion