Ransomware

PCIComplianceHubLast updated

A type of malicious software that encrypts a victim's files or data, demanding a ransom to restore access. Organizations must implement strong security measures, including regular backups and malware protection, to prevent ransomware attacks and maintain PCI DSS compliance.

Applies to. PCI DSS v4.0.1 does not name ransomware. Prevention sits under Requirement 5, where the anti-malware solution must detect all known types of malware and remove, block or contain them, and may run continuous behavioural analysis of systems or processes, which in general terms is the mechanism most likely to catch a new strain encrypting files. Recovery sits with the incident response plan under Requirement 12; the standard names no ransomware-specific backup or recovery control.
Related. Malware, Anti-Malware, Backup, Incident Response Plan, Business Continuity Plan (BCP)
Sources. PCI DSS v4.0.1 (June 2024)