In the first part of this tip, Andrew Baer discussed the provisions of PCI DSS Requirement 12.8 and what it means for vendor management. In the second part of the tip, below, Baer explores the ways ...

On March 31, 2022, the Payment Card Industry Security Standards Council published version 4.0 of its PCI Data Security Standard (PCI DSS). The updated standards provide significant new guidance on the ...

Version 4.0.1 of the Payment Card Industry Data Security Standard (PCI DSS), which came into effect back in April, incorporates a few important changes to make it fit for the modern digital world, ...

If your business accepts credit or debit card payments in any form — in person, online or over the phone — you are required to comply with the Payment Card Industry Data Security Standard, commonly ...

The PCI Standards Security Council (PCI SSC) published the latest update to the PCI Data Security Standard (PCI DSS) this week. The gold standard for retailers and financial organizations when it ...

PCI compliance is adherence to the set of policies and procedures developed to protect credit, debit and cash card transactions and prevent the misuse of cardholders' personal information. All card ...

The Payment Card Industry Data Security Standard (PCI DSS) turns 20 next year and has remained largely unchanged during that time. But version 4.0, due to become mandatory from April 2024, will bring ...

Organizations that are confused about where compliance responsibility lies may face difficulties with PCI DSS 4.0.1 compliance. The PCI Security Standards Council (PCI SSC) set March 31 as the ...

Learn more about PCI DSS 4.0 and its impact on organizations in 2025 in this Q&A. As of April 1, 2025, all merchants and third-party service providers (TPSPs) involved in processing credit or debit ...

Anton Chuvakin, PhD, GCIA, GCIH, GCFA is well-known security expert and author of the books “Security Warrior” and “PCI Compliance” and a contributor to “Know Your Enemy: Learning about Security ...