Data security is critical to any business that handle online transactions. The Data Security Standard PCI (PCI DSS) has established strict requirements to protect the information of the payment, and one of the key components is the analysis of vulnerabilities, external made by Analytics Providers that are Approved (ASV).
What is the Analysis of Vulnerabilities ASV?
The analysis of vulnerabilities ASV is a comprehensive assessment by approved suppliers to identify and mitigate potential risks in e-commerce systems. These analyses are essential to ensure that the environments of payment are safe and comply with the standards of the PCI DSS.
New Requirements in PCI DSS v4.x
With the update to PCI DSS v4.x you have added specific requirements for the traders who use the self-assessment questionnaire (SAQ) A. These new requirements are designed to address violations are common and increase safety in environments of e-commerce.
Traders SAQ now must complete the Requirement 11.3.2 of PCI DSSthat requires evidence of approval of scans external performed by an ASV at least once every three months. This step is crucial to minimize the risk of breaches that could compromise the payment transactions.
Who Applies?
These scanning requirements ASV apply to e-commerce systems which:
- Redirected to the payment transaction to a third party service provider (TPSP) that complies with PCI DSS.
- Include a page or form of integrated payment from a TPSP to comply with PCI DSS.
The goal is that traders identify and remediate vulnerabilities that can expose your link to the payment page of the TPSP, thereby ensuring the security of the transactions.
Resources and Key Considerations
The PCI Security Standards Council has created this guide to provide educational resources, and answer frequently asked questions about the Requirement 11.3.2 of the PCI DSS. This guide is indispensable for those traders who are completing this requirement for the first time and need to better understand the process of scanning and the benefits of working with an ASV.
Some of the topics covered include:
- Importance of the analysis of vulnerabilities.
- How to select an approved scanning vendor.
- Frequency and requirements of the scans.
- Steps to resolve the vulnerabilities identified.
Conclusion
To maintain the security of payment data is a critical responsibility for any trader. To follow the requirements of the PCI DSS and perform regular scans with analytics service providers approved, the traders can protect their e-commerce systems and provide an experience of a secure payment for their clients.
Explore the complete guide and make sure to comply with the highest safety standards!
See the resource guide
Discover more tips and strategies to protect your digital business on our blog
Fuente: https://n9.cl/iq_information_quality
