Articles tagged access control

PCI DSS Requirement 8.2.8: Idle Timeout and Re-authentication

What PCI DSS v4.0.1 Requirement 8.2.8 asks for when a session sits idle for 15 minutes, how an assessor checks it, what its applicability notes exclude, and the controls it works alongside.

How to Recognise and Avoid Phishing Attacks

The warning signs of a phishing message, the forms it takes, what to do if you have responded to one, and the PCI DSS v4.0.1 requirements that ask organisations handling card data to defend against it.