Articles tagged payment card security
PCI DSS Requirement 8.2.8: Idle Timeout and Re-authentication
What PCI DSS v4.0.1 Requirement 8.2.8 asks for when a session sits idle for 15 minutes, how an assessor checks it, what its applicability notes exclude, and the controls it works alongside.
The 12 Requirements of PCI DSS v4.0.1, Explained
A plain reading of each of the twelve PCI DSS v4.0.1 requirements: what it protects, the controls that carry most of its weight, and the numbers it sets, with links to every requirement's controls.
Malware Protection for PCI DSS: What Requirement 5 Asks For
PCI DSS v4.0.1 Requirement 5 control by control: where anti-malware must run, what the periodic evaluation of systems not at risk involves, the choice between scans and behavioural analysis, removable media, logs, tamper protection and phishing.