Articles tagged scope reduction

Using Network Segmentation to Reduce PCI DSS Scope

What network segmentation does under PCI DSS v4.0.1: why the standard does not require it but scope depends on it, what counts as isolated, and the testing and yearly scope confirmation that keep it counting.

How iframes Simplify PCI DSS Compliance for E-commerce Businesses

How embedding a payment provider's form in an iframe affects PCI DSS v4.0.1 scope: which SAQ each e-commerce integration leads to, what the SAQ A script criterion asks of an iframe merchant under the Council's FAQ 1588, and what an iframe does not protect.