Today we have seen the release of the PCI DSS take on PCI DSS Applicability in an EMV Environment: A Guidance Document. Today, we see my take on it … This document makes sense, provided one believes ...

The PCI DSS was written with IPv4 in mind and it requires that NAT be used to protect servers containing cardholder information. IPv6 networks do not need NAT and, in fact, use of NAT is less than ...

Every time a customer taps his or her credit card at checkout, it’s the retailer’s responsibility to process it and protect the cardholder’s data. But with so much data transmitted behind the scenes, ...

PCI DSS applies to all participants that process, store, or transmit cardholder data AI systems in payment environments are subject to ordinary PCI DSS scoping principles As of March 31, 2025, ...

Creating isolated network segments is so crucial that it’s among the first design principals called out in the PCI DSS document: Network segmentation of, or isolating (segmenting), the cardholder data ...