• PCI DSS 101 //005// What is Sampling in PCI DSS?

    In PCI DSS, “sampling” refers to the practice of an organization examining a smaller, representative component, such as a sample, to ensure that all aspects are being handled securely, as opposed to examining every single thing on a regular basis. To ensure that the soup is cooked through, you can taste a spoonful of it…

  • PCI DSS 101 //004// What is segmentation in PCI DSS?

    What is Segmentation in a network? Segmentation is the concept of restricting traffic between two or more network segments. You might think of it in this way. In a computer network, there are always two or more systems interacting with each other and exchanging information to perform their day-to-day operations. While this is necessary in…

  • PCI DSS 101 //003// What are PCI DSS SAQs?

    HISTORY In the ever-evolving landscape of cybersecurity, the early 2000s witnessed a significant transformation in the realm of PCI DSS. With each passing year, it became increasingly clear that a rigid, uniform approach might not fully address the unique challenges faced by every merchant. It was in this backdrop that the Payment Card Industry Security…

  • PCI DSS 101 //002// Service Providers & Merchants

    PCI DSS Merchants In the world of PCI DSS, merchants are the ones who receive payment card information from their valued customers. While their main priority is to sell goods and services, we can also view them as the “frontline sellers” of their retail shops. Just think of the bustling clothing stores, busy manufacturing companies,…

  • PCI DSS 101 //001// What is PCI DSS?

    Starting out your career in IT Audits? learn how to conduct audits through our articles published every week covering different standards. PCI DSS 101 is a series dedicated to learning PCI DSS fundamentals. This article is written with the help of former and current QSAs with 30+ years of combined experience.