Articles tagged e commerce security
Understanding PCI DSS 11.6.1: Detecting Changes to Payment Pages
What PCI DSS v4.0.1 Requirement 11.6.1 asks for: a mechanism that alerts on unauthorised changes to a payment page's security-impacting HTTP headers and scripts as the browser receives them, how often it must run, who it applies to since SAQ A changed in January 2025, and the techniques the standard names.
How iframes Simplify PCI DSS Compliance for E-commerce Businesses
How embedding a payment provider's form in an iframe affects PCI DSS v4.0.1 scope: which SAQ each e-commerce integration leads to, what the SAQ A script criterion asks of an iframe merchant under the Council's FAQ 1588, and what an iframe does not protect.
Choosing a PCI DSS Compliant Web Host for a Small Business
How to choose a web host when your site takes card payments: why the way your payment page is built matters more than the host, what a host's Attestation of Compliance does and does not cover, and what to ask before signing.