Assigning permissions carefully is one means of protecting sensitive account data by providing the minimum level of access necessary to perform an employee’s job. Requirement 7 details the means of securing data by keeping those who have access to “n...
PCI DSS Requirement 6 highlights the importance of installing security patches in order to protect systems from being accessed by anyone with malicious intentions. For this to be effective - and to prevent exploitation or compromise of account data -...
Malicious software, also commonly known as malware, is any software or firmware specifically designed to cause damage to, or penetrate the security systems of, a computer system without consent. Malware has the sole intent of compromising the system...
Vulnerabilities in legacy encryption and authentication protocols for wireless networks are often targeted by malicious individuals aiming to gain access to cardholder data environments (CDE). Merchants using strong encryption gain greater assurance ...
Public exposure of stored account and transaction data, either intentional or unintentional, can cause serious damage to a merchant. This is why the PCI SSC has created requirement three of the PCI DSS, which outlines the means and methods of protect...
Attackers often use default passwords and other vendor default settings to compromise systems. These passwords and settings are both well-known and easily accessible publicly for anyone to find. That is why it is imperative for merchants to update an...
