Is two-step authentication acceptable for PCI DSS Requirement 8.3?
Two-step or multi-step authentication may be acceptable for PCI DSS Requirement 8.3, if all of the following conditions are met:
- The authentication process requires at least two of …
Recent FAQ Changes RSS
Latest changes to PCI SSC frequently asked questions.
How do PCI DSS Requirements 2, 6 and 8 apply to SAQ A merchants
Merchants eligible to complete SAQ A are e-commerce or mail-order/telephone-order (MOTO) merchants that outsource all payment processing and do not store, process or transmit cardholder data on their premises or …
Which version of PCI DSS should an entity use?
The current version of PCI DSS is v4.0. PCI DSS v3.2.1 is also valid through 31 March 2024, after which that version will be retired. After 31 March 2024, PCI …
Can an entity be PCI DSS compliant if they use a service provider that is validated to a previous version of PCI DSS?
Yes. As entities transition between different versions of PCI DSS it may be necessary for an organization, such as a merchant, to rely on a service provider who is validated …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html - For questions about the …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html
- For questions about …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: http://www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html
- For questions …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html - For questions about the …
Do shared hosting providers need to comply with PCI DSS?
PCI DSS requirement 2.6 and Appendix A1: "Additional PCI DSS Requirements for Shared Hosting Providers" is applicable to all shared hosting providers whose customers store, process, or transmit cardholder data. …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html - For questions about the …