Resources

Essential PCI DSS v4.0 Transition Checklist

The proliferation of online transactions isn’t the only reason the PCI Council created the new 4.0 standard. Recent years have also seen increasingly sophisticated methods among cybercriminals, a surge in cloud use, and the rise of contactless payments. This spurred the need for an updated set of PCI DSS requirements, which were released in March 2022 and will become mandatory...

Datasheet

Tripwire ExpertOps and PCI

The Payment Card Industry Data Security Standard (PCI DSS) was created to help organizations that process credit card payments, secure the cardholder environment to prevent credit card fraud, cyber threats and other security vulnerabilities. The latest version, 4.0, provides specific security guidance on handling, processing, transmitting and storing credit card data to...

Datasheet

Tripwire Resident Engineers

The cybersecurity skills gap can leave many organizations without adequate staffing for the operation of their security tools. High turnover rates can also cause an organization to lose essential knowledge when team members leave who were familiar with the tools. To complicate matters further, the pandemic is driving the need for temporary cybersecurity support as agencies...

Datasheet

Tripwire’s Solutions for Automated, Continuous PCI Compliance

The Payment Card Industry Data Security Standard (PCI DSS) was created to help organizations that process credit card payments secure the cardholder environment to prevent credit card fraud, cyber threats, and other security vulnerabilities. The latest version, 4.0, provides specific security guidance on handling, processing, transmitting, and storing credit card data to...

Case Study

Payment Processor for Businesses

As a recognized leader in the payment processing sector, this company offers its clients hundreds of secure payment methods across multiple platforms, around the globe. Onan average day it processes tens of millions of mobile, online and in-store transactions in 100+ currencies. After experiencing a security incident that was quickly contained, the company took the opportunity...

Blog

PCI 4.0: The wider meanings of the new Standard

By David Bruce on Wed, 07/06/2022

Image The new PCI DSS Standard, version 4.0, contains all the steps, best practices, and explanations required for full compliance. In fact, even an organization that does not process cardholder data could follow the PCI Standard to implement a robust cybersecurity program for any of its important data. In our series about how the...

Blog

What you need to know about PCI 4.0: Requirements 10, 11 and 12

By David Bruce on Wed, 06/29/2022

Image As we continue our review of the 12 Requirements of PCI DSS version 4.0, one has to stop and consider, is it possible to have a favorite section of a standard? After all, most guidance documents, as well as regulations are seen as tedious distractions from the importance of getting the job done. However, depending on a person’s...

Blog

What you need to know about PCI 4.0: Requirements 5, 6, 7, 8 and 9

By David Bruce on Wed, 06/22/2022

Image In Part 1 of this series, we reviewed the first four sections of the new PCI standards. As we continue our examination of PCI DSS version 4.0, we will consider what organizations will need to do in order to successfully transition and satisfy this update. Requirements 5 through 9 are organized under two categories: Maintain a...

Blog

What you need to know about PCI 4.0: Requirements 1, 2, 3 and 4.

By David Bruce on Tue, 06/14/2022

Image The Payment Card Industry Security Standards Council has released its first update to their Data Security Standard (PCI DSS) since 2018. The new standard, version 4.0, is set to generally go into effect by 2024, but there are suggested updates that are not going to be required until a year after that. This, of course, creates...

Blog

PCI DSS 4.0 and ISO 27001 – the dynamic duo

By Tripwire Guest Authors on Wed, 04/27/2022

Image It’s not often we can say this, but 2022 is shaping up to be an exciting time in information governance, especially for those interested in compliance and compliance frameworks. We started the year in eager anticipation of the new version of the international standard for information security management systems, ISO 27001:2022,...

Blog

PCI DSS 4.0 is Here: What you Need to Consider

By David Bruce on Tue, 04/26/2022

Image The Payment Card Industry Data Security Standard (PCI DSS) is a benchmark with tenure in the industry, with the first version being introduced in 2004. The PCI DSS was unique when it was introduced because of its prescriptive nature and its focus on protecting cardholder data. Cybersecurity is a changing landscape, and...

Blog

How Achieving Compliance with PCI DSS Can Help Meet GDPR Mandates

By Tripwire Guest Authors on Sun, 11/14/2021

Image Data security and privacy are today a prime focus for most organizations globally. While there have been several regulations and standards introduced to improve data security, the evolving landscape makes it challenging for organizations to stay compliant. For many organizations, GDPR and PCI DSS are the first topics that come...

Blog

PCI DSS 4.0 Is Coming – Are You Ready?

By Editorial Staff on Wed, 03/03/2021

Image Ransomware today is a billion-dollar industry. It’s crippled industries like healthcare. In 2017, for instance, WannaCry brought much of the United Kingdom’s National Health Service to its knees using the EternalBlue exploit. It was just a few weeks later when the NotPetya ransomware strain leveraged that same vulnerability to...

Blog

Steps for PCI DSS Gap Analysis

By Tripwire Guest Authors on Mon, 01/11/2021

Image Complying with Standards drawn by the Payment Card Industry Security Standards Council can be complicated and time-consuming. But, with a PCI DSS Gap Analysis, the process becomes a lot easier, streamlined, and less exhaustive. PCI Gap Analysis is the first step towards the Compliance process. The assessment provides details on...

Blog

A Checklist for Preparing for Your Organization's Next PCI Audit

By Anthony Israel-Davis on Wed, 07/01/2020

Image Organizations cannot afford to neglect their PCI compliance obligations. According to its website, PCI could punish offending organizations with a monetary penalty ranging in value from $5,000 to $100,000 per month. These fines could spell the end for a small business. Acknowledging those consequences, organizations need to make...

Blog

Verizon’s 2019 Payment Security Report – Not Just for PCI

By Anthony Israel-Davis on Tue, 12/03/2019

If you are responsible for cybersecurity or data protection in your organization, stop what you are doing and read this report. Actually, first, go patch your servers and applications and then read this report. Much like Verizon’s Data Breach Investigations Report (DBIR), the Payment Security Report (PSR) is a must-read for security professionals. While it focuses on the PCI...

Blog

Strong Customer Authentication: A Vehicle for PCI-DSS Compliance

By Anastasios Arampatzis on Tue, 09/03/2019

Image Payment services that operate electronically should adopt technologies that guarantees the safe authentication of the user and reduces, to the maximum extent possible, the risk of fraud. In order to achieve this, the European Union in 2007 passed the Payment Services Directive (PSD). The aim of this legislation is to regulate...

Blog

A Beginner’s Guide to PCI Compliance

By Megan Freshley on Tue, 04/23/2019

Image PCI DSS, or the Payment Card Industry Data Security Standard, is the set of requirements for organizations who process card payments. Sounds simple enough, right? But PCI compliance can pose a major challenge to organizations if they’re not equipped with the proper knowledge and tools. Let’s take a quick look at the basics of...

Blog

How the CIS Controls Can Help You Achieve PCI DSS 3.2 Compliance

By David Bisson on Sun, 08/05/2018

Image Compliance with version 3.2 of the Payment Card Industry Data Security Standard (PCI DSS) is a must for organizations that handle, process, transmit and store payment card data. But compliance isn’t always easy to establish or maintain. Indeed, there are certain challenges along the way that can make organizations’ compliance...

Blog

PCI DSS Version 3.2.1 Published by PCI Security Standards Council

By David Bisson on Mon, 05/21/2018

Image The Payment Card Industry Security Standards Council (PCI SSC) published a minor revision to version 3.2 of its Data Security Standard (PCI DSS). On 17 May, PCI SSC published PCI DSS version 3.2.1. The purpose of the update was to clarify organizations' use of the Standard and when they would need to upgrade their use of common...

Essential PCI DSS v4.0 Transition Checklist

Tripwire ExpertOps and PCI

Tripwire Resident Engineers

Tripwire’s Solutions for Automated, Continuous PCI Compliance

Payment Processor for Businesses

PCI 4.0: The wider meanings of the new Standard

What you need to know about PCI 4.0: Requirements 10, 11 and 12

What you need to know about PCI 4.0: Requirements 5, 6, 7, 8 and 9

What you need to know about PCI 4.0: Requirements 1, 2, 3 and 4.

PCI DSS 4.0 and ISO 27001 – the dynamic duo

PCI DSS 4.0 is Here: What you Need to Consider

How Achieving Compliance with PCI DSS Can Help Meet GDPR Mandates

PCI DSS 4.0 Is Coming – Are You Ready?

Steps for PCI DSS Gap Analysis

A Checklist for Preparing for Your Organization's Next PCI Audit

Verizon’s 2019 Payment Security Report – Not Just for PCI

Strong Customer Authentication: A Vehicle for PCI-DSS Compliance

A Beginner’s Guide to PCI Compliance

How the CIS Controls Can Help You Achieve PCI DSS 3.2 Compliance

PCI DSS Version 3.2.1 Published by PCI Security Standards Council

Contact Information

Privacy Policy

Cookie Policy

Impressum