What is PCI DSS compliance and why is it important?
![PCI DSS and credit card data](https://www.complior.se/wp-content/uploads/2022/03/Outsource_linkedin-01-1024x536.png)
In a lot of countries can declare that cash is no longer king, ensuring the secure handling of cardholder data is therefore extra important
The importance of being transparent in PCI DSS
![woman standing in a door way shaped as an upward arrow](https://www.complior.se/wp-content/uploads/2022/11/Transparency-02-1024x536.png)
It is very important for an entity starting its compliance process to perform a GAP analysis towards the standard.
The scoping exercise: the foundation for PCI DSS compliance
![Woman putting a toy brick on top of another](https://www.complior.se/wp-content/uploads/2022/11/Foundation-02-1024x536.png)
The more complex your processes and systems for storing, transmitting or processing cardholder data are, the harder to maintain compliance
How security measures keep the scare away đź‘»
![a halloween image with a witch on a broom in front of the moon](https://www.complior.se/wp-content/uploads/2022/10/Halloween-blog-feauted-images-01.jpeg)
When was the last time your organization ensured all personal data and business critical applications were tested for vulnerabilities?
Security/privacy by design and software development
![Five people holding up a sign with security lock](https://www.complior.se/wp-content/uploads/2022/10/Privacy-02-1024x536.png)
Understand the concept of security/privacy by design with regards to software development, the GDPR and the PCI DSS.
PCI-DSS vs ISO 27001
![credit card, lock and safety shield](https://www.complior.se/wp-content/uploads/2022/05/credit-card-data-02-1-1024x636.png)
The objective for both standards is to secure and manage company information, but they do so in different ways and to different extents.
Are you protecting your client data securely enough?
![people working with a data center server room](https://www.complior.se/wp-content/uploads/2022/04/data-center-server-room-01-1024x536.png)
If you’re a small to medium sized business do you have to meet as many requirements and jump through as many hoops as a large enterprise?
Penetration Testing Guidelines and Best Practices – Part 1
![man inspecting requirements](https://www.complior.se/wp-content/uploads/2021/07/penetration-testing-guidelines-07-1024x719.png)
What does PCI DSS say about penetration testing? PDI DSS does provide some guidelines to penetration testing. What the PCI standard explicitly mandates about penetration testing is illustrated in Requirement 11.3, requiring organizations to perform annual penetration tests that would mainly: While the composition of the network layer tests is left to the discretion of the […]
Can tokenization reduce PCI DSS audit scope?
![image of a data server and a credit card, in a cartoon style](https://www.complior.se/wp-content/uploads/2020/11/Token-blog-03-1024x550.png)
Tokenization replaces cardholder data with an “alias”, a separate random-generated value called a token. Learn more on the blog
The Basics of Penetration Testing in PCI DSS
![](https://www.complior.se/wp-content/uploads/2020/11/two-phases-05-1024x477.png)
A penetration test could be described as but realistic cyber attack that aims to determine how deep an attacker would be able to penetrate