Articles tagged cardholder data environment
Using Network Segmentation to Reduce PCI DSS Scope
What network segmentation does under PCI DSS v4.0.1: why the standard does not require it but scope depends on it, what counts as isolated, and the testing and yearly scope confirmation that keep it counting.
PCI DSS Requirement 8.2.8: Idle Timeout and Re-authentication
What PCI DSS v4.0.1 Requirement 8.2.8 asks for when a session sits idle for 15 minutes, how an assessor checks it, what its applicability notes exclude, and the controls it works alongside.