Current analysis on payment security, fraud prevention, AML/KYC, and PCI DSS compliance.
PCI DSS ComplianceThe PCI SSC s August 2026 FAQ #1588 highlighted a documentation gap causing compliance issues: if your e-commerce site uses redirect-based payment flows instead of iFrames, you re still expected to co
PCI DSS ComplianceScope This guide explores how to implement software-based tamper detection in POS environments, focusing on radio-based anomaly detection systems. You ll find mappings to PCI DSS 4.0 , deployment cons
PCI DSS ComplianceManaging Dual Frameworks: A Common Challenge Compliance teams often juggle both PCI DSS obligations and broader cybersecurity frameworks like the NIST Cybersecurity Framework . If your team is running
PCI DSS ComplianceThe Question at Hand Your team faces a decade-long retention mandate for transaction records. You re paying cloud storage bills that climb every quarter, and your compliance budget didn t anticipate s
Get weekly security insights and compliance updates delivered to your inbox.
PCI DSS ComplianceThe Challenge A multinational payment processor s compliance team found a problem during a routine gap assessment: their Brazilian acquirer partner had implemented network segmentation controls that d
PCI DSS ComplianceThe MPoC Guidance Document addresses a common issue: an SDK passes validation, your application integrates it, but the lab flags dependencies or listing mismatches during assessment. This document com
PCI DSS ComplianceThe Challenge SISA, a forensics-driven cybersecurity company in the payment security sector, faced a critical question 18 months ago: how do you integrate AI across your operations while defending aga
PCI DSS ComplianceWhat Happened Between February 13 and March 16, the PCI Security Standards Council opened a 30-day request for comments (RFC) period for draft revisions to the Card Production and Provisioning Physica
PCI DSS ComplianceYou run a P2PE (Point-to-Point Encryption) certified checkout environment. Your POI (Point of Interaction) devices encrypt card data at the swipe, and your assessor has signed off on the solution. But
PCI DSS ComplianceThe Challenge In March 2026, the PCI SSC s Q1 All Assessor Session was inundated with questions about one issue: how should merchants using SAQ A prove their websites aren t vulnerable to script attac
PCI DSS ComplianceWhen your segmentation test starts in February but doesn t finish until May, which date triggers the six-month clock for your next test? PCI DSS v4.0.1 doesn t explicitly answer this question, but pag
PCI DSS ComplianceNew AI Requirements in PCI Secure SLC Standard v2.0 The PCI Security Standards Council (PCI SSC) opened a 30-day Request for Comments (RFC) period from May 15 to June 15 for the Secure Software Lifecy
PCI DSS ComplianceThe question at hand Your company outsources its entire eCommerce operation to a third party. Are you still in scope for PCI DSS compliance? The answer hinges on a detail most merchants overlook: who
PCI DSS ComplianceThe Problem An organization using PCI DSS v4.x opted for the customized approach for several requirements. They enlisted their Qualified Security Assessor (QSA) early on, seeking help to design custom
PCI DSS ComplianceThe PCI Security Standards Council released its Information Supplement for Compensating Controls and the Customized Approach on June 11, 2026. The most significant change is that assessed entities now
PCI DSS ComplianceYou ve likely heard the rumors in vendor meetings and compliance calls. As the PCI SSC rolls out version 2.0 of the Secure Software Standard, myths are spreading. Some arise from wishful thinking abou
