User withoutfire

8 votes

Validating and storing credit card data for retrieval later

answered May 26, 2022 at 17:28

4 votes

How do companies like Uber and Paypal store card details? Is it possible to offer PCI compliance whilst saving credit card details locally?

answered Apr 22, 2022 at 9:35

4 votes

SAQ-D Service Provider without a CDE

answered Dec 10, 2017 at 11:01

3 votes

Accepted

Using an unknown hash algorithm for passwords and be PCI-compliant?

answered May 24, 2017 at 10:00

3 votes

Does transmitting first 6 and last 4 digits of the card number and expire date require PCI DSS compliance?

answered Sep 2, 2017 at 7:54

3 votes

PCI-DSS for Financial Institutions and Issuer

answered Oct 8, 2017 at 10:45

3 votes

How does a card issuer comply with PCI if they have to print PANs in clear text?

answered Sep 3, 2021 at 21:43

3 votes

Accepted

How does collecting sensitive data using iframes increase security?

answered Apr 26, 2021 at 5:55

2 votes

How to check validity of a PCI DSS Attestation of Compliance certificate?

answered Mar 26, 2022 at 9:48

2 votes

Accepted

What exactly are the characteristics of TLS required by PCI DSS and which reference describes these?

answered Nov 1, 2021 at 9:43

2 votes

Required security for storing bank transactions, but not credentials

answered Aug 28, 2017 at 10:13

2 votes

sensitive data temporarily stored, then redacted: PCI compliant?

answered May 4, 2017 at 15:49

2 votes

Payment device compliance of PCI v2 AND PCIv3

answered May 2, 2019 at 23:00

2 votes

PCI P2PE running as independent software on POS?

answered May 17, 2019 at 17:31

2 votes

Accepted

Are PCI DSS standard requirements regarding TLS applicable only to customer facing webs or to whole even internal networks?

answered Jun 15, 2019 at 15:18

2 votes

Accepted

Storing customer credit card information for manual processing later

answered Oct 12, 2017 at 8:04

2 votes

Accepted

PCI DSS compliance on storing email body in database which contains plain text password

answered Oct 26, 2019 at 15:57

2 votes

Accepted

PCI Compliance & Third Parties

answered Nov 16, 2019 at 17:01

2 votes

Cardholder info transmission between issuing and acquiring banks

answered Feb 1, 2020 at 14:53

2 votes

Accepted

PCI Compliance - Service Provider vs Merchant

answered Apr 24, 2020 at 11:24

2 votes

Accepted

PCI scope for credit card forms that talk to Stripe, Braintree, etc

answered Apr 30, 2020 at 11:23

2 votes

Accepted

Can biometric vectors (i.e. fingerprint vector) be considered as Sensitive Authentication Data (SAD) in PCI?

answered Jul 30, 2020 at 9:39

2 votes

Accepted

File Integrity Monitoring via Syslog-ng or agentless - is it possible?

answered Sep 28, 2020 at 16:23

1 vote

PCI DSS Protectecting Card Data Elements when Transmitting PAN

answered Oct 22, 2020 at 15:17

1 vote

Which Authentication mechanism to choose for PCI-DSS system

answered May 24, 2020 at 15:07

1 vote

Storing credit card information - encrypted at rest

answered May 29, 2020 at 15:27

1 vote

Monitoring User (developer) interaction

answered Jul 15, 2020 at 18:48

1 vote

Accepted

Is it allowed to store 8-digit BINs outside of CDE

answered Jan 31, 2020 at 15:40

1 vote

Accepted

Using MFA to connect to windows shares on domain controller

answered Sep 13, 2017 at 21:19

1 vote

What is the process to use previously-deployed POI devices in a PCI P2PE solution?

answered Oct 8, 2017 at 10:56

Stack Exchange Network

49 Answers

Validating and storing credit card data for retrieval later

How do companies like Uber and Paypal store card details? Is it possible to offer PCI compliance whilst saving credit card details locally?

SAQ-D Service Provider without a CDE

Using an unknown hash algorithm for passwords and be PCI-compliant?

Does transmitting first 6 and last 4 digits of the card number and expire date require PCI DSS compliance?

PCI-DSS for Financial Institutions and Issuer

How does a card issuer comply with PCI if they have to print PANs in clear text?

How does collecting sensitive data using iframes increase security?

How to check validity of a PCI DSS Attestation of Compliance certificate?

What exactly are the characteristics of TLS required by PCI DSS and which reference describes these?

Required security for storing bank transactions, but not credentials

sensitive data temporarily stored, then redacted: PCI compliant?

Payment device compliance of PCI v2 AND PCIv3

PCI P2PE running as independent software on POS?

Are PCI DSS standard requirements regarding TLS applicable only to customer facing webs or to whole even internal networks?

Storing customer credit card information for manual processing later

PCI DSS compliance on storing email body in database which contains plain text password

PCI Compliance & Third Parties

Cardholder info transmission between issuing and acquiring banks

PCI Compliance - Service Provider vs Merchant

PCI scope for credit card forms that talk to Stripe, Braintree, etc

Can biometric vectors (i.e. fingerprint vector) be considered as Sensitive Authentication Data (SAD) in PCI?

File Integrity Monitoring via Syslog-ng or agentless - is it possible?

PCI DSS Protectecting Card Data Elements when Transmitting PAN

Which Authentication mechanism to choose for PCI-DSS system

Storing credit card information - encrypted at rest

Monitoring User (developer) interaction

Is it allowed to store 8-digit BINs outside of CDE

Using MFA to connect to windows shares on domain controller

What is the process to use previously-deployed POI devices in a PCI P2PE solution?