Introduction to PCI Requirement 2
by Randy Bartels / June 30th, 2017
What is PCI Requirement 2? PCI Requirement 2 mandates, “Do not use vendor-supplied defaults for system passwords and other security parameters.” Were you aware…
PCI DSS Requirement 1.5: Ensure Security Policies are Known to all Affected Parties
by KirkpatrickPrice / April 18th, 2017
Examining PCI Requirement 1.5 At the end of each of the PCI DSS v3.2 Requirements, we have what we like to call a “capstone.”…
PCI DSS Requirement 1.4: Install Personal Firewall Software
by KirkpatrickPrice / April 18th, 2017
Unpacking PCI Requirement 1.4 PCI Requirement 1.4 states, “Install personal firewall software or equivalent functionality on any portable computing devices (including company and/or employee-owned)…
PCI DSS Requirement 1.3.7: Do Not Disclose Private IP Addresses
by KirkpatrickPrice / April 18th, 2017
What is PCI Requirement 1.3.7? The goal of your organization is to make it as difficult as possible for someone to hack into your…
PCI DSS Requirement 1.3.6: Segregate the CDE from the DMZ
by KirkpatrickPrice / April 18th, 2017
What's in PCI Requirement 1.3.6? To meet PCI Requirement 1.3.6, your organization must not store cardholder data within the DMZ. PCI Requirement 1.3.6 states,…
