Articles tagged pci compliance

How to Recognise and Avoid Phishing Attacks

The warning signs of a phishing message, the forms it takes, what to do if you have responded to one, and the PCI DSS v4.0.1 requirements that ask organisations handling card data to defend against it.

Storing CVV: What Merchants Need to Know

What PCI DSS v4.0.1 says about the card verification code: it may not be stored once authorisation completes, what is allowed before that, where it tends to hide, and what counts as a CVV and what does not.

What Happens If Your Third-Party Service Provider's AOC Is Nearly a Year Old?

What the PCI Security Standards Council says in FAQ 1601 about relying on a service provider's Attestation of Compliance when its assessment is close to a year old, and the processes your assessor will expect to see.