Articles tagged phishing

PCI DSS Requirement 5.4.1: Protecting Personnel Against Phishing

What PCI DSS v4.0.1 Requirement 5.4.1 asks for: processes and automated mechanisms against phishing, who they must protect, how they are tested, where DMARC, SPF and DKIM fit, and how it differs from the phishing training in 12.6.3.1.

QR Code Phishing and PCI DSS

How QR code phishing works, in messages and on printed codes, which PCI DSS v4.0.1 requirements it touches, and what a business that displays QR codes for payment can do about tampering.

How to Recognise and Avoid Phishing Attacks

The warning signs of a phishing message, the forms it takes, what to do if you have responded to one, and the PCI DSS v4.0.1 requirements that ask organisations handling card data to defend against it.