Latest changes to PCI SSC frequently asked questions.
Contact details for the payment brands are provided below:
American Express
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html - For questions about the …
Masking is addressed in PCI DSS Requirement 3.3, whereas truncation is one of several options specified to meet PCI DSS Requirement 3.4.
Masking is a method of concealing a …
The intent of the PCI DSS logging requirements is to provide a full record of who did what, where, when, and how, so it can be used for investigation in …
Any cardholder data that is stored, processed, or transmitted must be protected in accordance with PCI DSS. If faxes or emails are sent or received via modem over a traditional …
PCI DSS requirement 2.6 and Appendix A: "Additional PCI DSS Requirements for Shared Hosting Providers" is applicable to all shared hosting providers whose customers store, process, or transmit cardholder data. …
For information about protecting different elements of cardholder data (CHD), please refer to the tables provided in the "PCI DSS Applicability Information" section in the PCI DSS. The tables illustrates …
PCI DSS requirement 10.2.5 requires organizations to log the use of and changes to identification and authentication mechanisms. These mechanisms include activities such as creation of new accounts and elevation …
A system-level object is anything on a computer system required for its operation, including, but not limited to, database tables, stored procedures, application executables and configuration files, system configuration files, …
The term “remote access” refers to access to a computer network from a location outside of that network.
Examples of remote access include access from the Internet, an “untrusted” …
PCI DSS requirement 3.3 requires that the PAN be masked when it is displayed (for example, on screens, logs, reports, receipts), unless the viewing party has a specific business need …
