In one word? Yes. Requirement 11.3.4.1 of the Payment Card Industry Data Security Standard (PCI DSS) does mandate penetration testing — but not for everyone. In this article, we’ll discuss penetration testing and who is required by PCI DSS to perform it.
PCI DSS penetration testing a method for finding internal and external vulnerabilities on a network. This differs … Read More
Perhaps the most oft-misunderstood Payment Card Industry Data Security Standard (PCI DSS) requirement is number 11: the vulnerability scanning requirement. Requirement 11 is all about scanning — what to scan, when to scan, how to scan, and whom to report the scan results to. Fun stuff like that. And knowing where to find an approved scanning vendor is a huge part of that.
Fortunately, there’s an ea… Read More
The Payment Card Industry Data Security Standards (PCI DSS) mandates that all organizations, regardless of size or level, must perform quarterly ASV scans.
What does all of this mean? It entails:
All of this can be a considerable headache if you d… Read More
The Payment Card Industry Data Security Standards (PCI DSS) are extremely clear about their vulnerability scanning requirements — both for a PCI internal vulnerability scan and an external one. Any organization that accepts payment card is required to scan its network regularly. Specifically, that means that they need to:
Not only does PCI DSS require quarterly vulnerability scans (and reports), it also requires you to work with an ASV vendor, or what’s known as an “approved scanning vendor” or “ASV vulnerability scan vendor.” In the industry, there are many PCI ASV vendors competing for business. And that begs the question, what’s the best ASV scanning vendor to work with?
Easy. It’s Sectigo.
Look, we could try to ma… Read More
The Payment Card Industry Data Security Standard (PCI DSS) requirement — number 11 — that mandates quarterly ASV scans for vulnerabilities is one of the most cringed-about requirements of any compliance framework anywhere. Yes, the dreaded PCI vulnerability scan. The word “scan” gives companies fits. That’s silly, because as you’re about to see, scanning is simple.
Sectigo is a PCI-approved scanning … Read More
We all know that vulnerability scanning is a Payment Card Industry Data Security Standard (PCI DSS) requirement. Every organization that accepts payment cards, regardless of size, is required to perform quarterly ASV scans — both internal and external — using a product or approved scanning vendor (ASV). And while that sounds like an onerous requirement, we’re about to show you that it’s really not. … Read More
PCI DSS is a set of standards that any company accepting payment cards must follow. It’s a set of 12 rules that ensure you’re staying secure and keeping the data you collect safe. PCI non compliance can be a big problem for businesses worldwide who don’t follow the framework.
What may come as a surprise is that PCI DSS is actually not a very onerous regulation; in fact, most of the requirem… Read More
PCI DSS, which stands for Payment Card Industry Data Security Standards, is a regulatory framework for companies that collect payment card information. That sounds incredibly exciting, does it not? While PCI DSS requirements do concern physical security to a certain extent, the framework mainly pertains to the world of eCommerce, where payment card information is a major target for criminals.
In f… Read More
One of the most important requirements for the Payment Card Industry Data Security Standards (PCI DSS) is internal and external site scanning. The PCI DSS scan is the portion of compliance that many companies struggle with owing to the opacity of the requirement. Specifically, how does one perform a PCI DSS compliance scan?
This article is going to explain the easiest, most cost-effective way to perf… Read More
