Internal Security Assessor (ISA) Training Case Study: WestJet

WestJet has always worked to maintain PCI compliance across a complex environment that spans over 20 payment channels and 40 different internal teams. As part of its PCI …
The latest changes across all tracked PCI resources.

WestJet has always worked to maintain PCI compliance across a complex environment that spans over 20 payment channels and 40 different internal teams. As part of its PCI …

The countdown is on for this year’s Europe Community Meeting! We’re thrilled to share an early look at some of the exceptional sessions coming your way in Amsterdam, …

Artificial intelligence (AI) systems are increasingly being used within businesses to help in the creation, management, and operation of payment systems and environments. Their use is expanding beyond systems …
.jpg)
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for …

The PCI Security Standards Council (PCI SSC) is often asked whether compliance certificates are acceptable to demonstrate an organization’s validation to the PCI Data Security Standard (PCI DSS).
…

The PCI Security Standards Council (PCI SSC) is pleased to welcome its newest team member, Úna Dillon, Regional Director, Europe. As Regional Director, Úna serves as the primary liaison …
No. PCI DSS Requirement 4.2.2. prohibits the sending of unprotected primary account numbers (PANs) via end-user messaging technologies, whether sent internally or over public networks. E-mail, instant messaging, SMS, and …
PCI DSS does not prevent the use of end-user technologies (such as email, SMS, chat, etc.) to request or receive cardholder data. However, if an end-user messaging technology is used …
Any cardholder data that is stored, processed, or transmitted must be protected in accordance with PCI DSS. If faxes are sent or received via modem over a traditional PSTN phone …