category:

PCI DSS

Article

PCI DSS version 4.0 – Awareness Training

Many organizations are now also operating hybrid environments and may have staff taking payments from home over the phone or on personal devices. PCI awareness training should address necessary security controls for remote work environments and the consequences for not adhering to acceptable use policies.

PCI DSS
Staff Training and Awareness about the PCI DSS version 4.0 – Awareness Training
Article

PCI and VoIP – Do Not Pass Go

Ransomware attacks are on the rise, with the average ransomware attack costing $1.85 million in 2020. To help avert a ransomware attack, security efforts and resources should be dedicated to proactively identify exploitable vulnerabilities, recognize the early signs of an attack, and deploy preventative measures and technologies.

PCI DSS
Understanding Your VoIP Environment about the PCI and VoIP – Do Not Pass Go
Article

PCI DSS v4.0 – Vulnerability Scanning for SAQ A Merchants

Even if your organization is not planning to attest compliance under PCI DSS version 4.0, we recommend that you begin gathering an inventory of all e-commerce websites in use by your merchants, reviewing current configurations, and documenting IP addresses and relevant information about any re-direct servers.

PCI DSS
Managing Merchant Data about the PCI DSS v4.0 – Vulnerability Scanning for SAQ A Merchants
Case Study

Virginia Polytechnic Institute and State University Sustains PCI Compliance

Learn how CampusGuard helped Virginia Tech develop its policies and security awareness training and implement the technical controls required to be PCI compliant.

PCI DSS
View the Case Study about the Virginia Polytechnic Institute and State University Sustains PCI Compliance
Article

A QSA's Top Seven PCI DSS v4.0 Critical Takeaways

It’s going to take a while for the industry to fully digest it and determine impacts and best paths forward. But even a first pass over the newly-published standard shows us a few critical points.

PCI DSS
7 PCI Takeaways from a QSA about the A QSA's Top Seven PCI DSS v4.0 Critical Takeaways
Article

PCI DSS v4.0: Impact to E-commerce Environments

A significant shift to online payments has seen a rise in e-commerce attacks. According to Juniper Research, losses to online payment fraud will amount to $206 billion between 2021 and 2025.

PCI DSS
A Rise in E-commerce Attacks about the PCI DSS v4.0: Impact to E-commerce Environments
Article

PCI DSS v4.0: Device Inspections

We take a deep dive into Requirement 9.5 in the latest PCI DSS version 4.0 and the processes your organization needs to take for compliance. Are your processes documented and are steps being taken to secure devices to prevent unauthorized access to cardholder data?

PCI DSS
Securing Your Devices about the PCI DSS v4.0: Device Inspections
Article

PCI DSS: Maintaining an Asset Inventory

What information should be kept within your PCI asset inventory? Although the PCI DSS isn’t highly specific outside of function/purpose, here is some information that can be helpful to document, as applicable to each system.

PCI DSS
PCI Asset Inventory List about the PCI DSS: Maintaining an Asset Inventory
Article

PCI Compliance Gotcha: Directing Customers to Labs/Kiosks

When a computer workstation is utilized for payment processing, it then falls into PCI scope and must be secured according to the PCI DSS.

PCI DSS
PCI Scope Considerations about the PCI Compliance Gotcha: Directing Customers to Labs/Kiosks