0

What are the other requirements in PCI DSS 3.2 rather than these two :

  • Revised Secure Sockets Layer (SSL) and early Transport Layer Security (TLS) sunset dates as outlined in the Bulletin on Migrating from SSL and Early TLS.

  • Expansion of requirement 8.3 to include use of multi-factor authentication for administrators accessing the cardholder data environment.

Thanks.

Improve this question

1 Answer 1

Reset to default
2

According to Preparing for PCI DSS 3.2 - Summary of Changes, the following changes exist in addition to Multifactor and "early TLS" changes:

  • “Designated Entities Supplemental Validation” (DESV) is incorporated as an appendix and may be required on a case-by-case basis.
  • Service Providers are being singled out for more scrutiny given their broader impact on the attack surface.
Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .