Whether a particular whitelisting implementation can meet PCI DSS Requirement 5 will depend on the specific implementation. The intent of Requirement 5 is to detect, remove and protect system components …
The categories on the service provider Attestation of Compliance (AOC) are provided to assist those completing the AOC to identify their business functions as they deem appropriate and, where applicable, …
The PCI DSS SAQ Instructions and Guidelines document (available from the PCI SSC Documents Library) provides information about the different SAQs and the types of environments that each SAQ is …