Does PCI DSS Require PCI Penetration Testing?

In one word? Yes. Requirement 11.3.4.1 of the Payment Card Industry Data Security Standard (PCI DSS) does mandate penetration testing — but not for everyone. In this article, we’ll discuss penetration testing and who is required by PCI DSS to perform it.

What is PCI Penetration Testing?

PCI DSS penetration testing a method for finding internal and external vulnerabilities on a network. This differs … Read More

Sectigo: The Most Cost-Effective PCI Approved Scanning Vendor

Perhaps the most oft-misunderstood Payment Card Industry Data Security Standard (PCI DSS) requirement is number 11: the vulnerability scanning requirement. Requirement 11 is all about scanning — what to scan, when to scan, how to scan, and whom to report the scan results to. Fun stuff like that. And knowing where to find an approved scanning vendor is a huge part of that.

Fortunately, there’s an ea… Read More

How to Run a PCI DSS External Vulnerability Scan

The Payment Card Industry Data Security Standards (PCI DSS) mandates that all organizations, regardless of size or level, must perform quarterly ASV scans.

What does all of this mean? It entails:

  • going through an approved PCI ASV scanning vendor,
  • running both internal and external vulnerability scans, and
  • submitting reports to your acquiring bank.

All of this can be a considerable headache if you d… Read More

How to Run a PCI Internal Vulnerability Scan

The Payment Card Industry Data Security Standards (PCI DSS) are extremely clear about their vulnerability scanning requirements — both for a PCI internal vulnerability scan and an external one. Any organization that accepts payment card is required to scan its network regularly. Specifically, that means that they need to:

  • Scan quarterly;
  • Use an approved PCI ASV scanning vendor;
  • Scan internally and ext
Read More

Who’s the Best ASV Vendor for PCI Scanning?

Not only does PCI DSS require quarterly vulnerability scans (and reports), it also requires you to work with an ASV vendor, or what’s known as an “approved scanning vendor” or “ASV vulnerability scan vendor.” In the industry, there are many PCI ASV vendors competing for business. And that begs the question, what’s the best ASV scanning vendor to work with?

Easy. It’s Sectigo.

Look, we could try to ma… Read More

How to Run a PCI Vulnerability Scan for PCI Compliance

The Payment Card Industry Data Security Standard (PCI DSS) requirement — number 11 — that mandates quarterly ASV scans for vulnerabilities is one of the most cringed-about requirements of any compliance framework anywhere. Yes, the dreaded PCI vulnerability scan. The word “scan” gives companies fits. That’s silly, because as you’re about to see, scanning is simple.

Sectigo is a PCI-approved scanning Read More

ASV Pricing: How Much Does a PCI ASV Scan Cost?

We all know that vulnerability scanning is a Payment Card Industry Data Security Standard (PCI DSS) requirement. Every organization that accepts payment cards, regardless of size, is required to perform quarterly ASV scans — both internal and external — using a product or approved scanning vendor (ASV). And while that sounds like an onerous requirement, we’re about to show you that it’s really not. … Read More

PCI Non Compliance: What Happens If I Don’t Follow PCI DSS?

PCI DSS is a set of standards that any company accepting payment cards must follow. It’s a set of 12 rules that ensure you’re staying secure and keeping the data you collect safe. PCI non compliance can be a big problem for businesses worldwide who don’t follow the framework.

What may come as a surprise is that PCI DSS is actually not a very onerous regulation; in fact, most of the requirem… Read More

How to Meet PCI DSS Requirements for Security & Compliance

PCI DSS, which stands for Payment Card Industry Data Security Standards, is a regulatory framework for companies that collect payment card information. That sounds incredibly exciting, does it not? While PCI DSS requirements do concern physical security to a certain extent, the framework mainly pertains to the world of eCommerce, where payment card information is a major target for criminals.

In f… Read More