Resource Guide: Vulnerability Scans and Approved Scanning Vendors [July 10, 2024]
Attention all online merchants! The PCI Security Standards Council (PCI SSC) has released new requirements under PCI DSS v4.x to enhance security for those taking online payments. Here’s what you need to know:
New Requirement for SAQ A Merchants: Merchants completing SAQ A must now perform external vulnerability scans conducted by PCI Approved Scanning Vendors (ASVs). This is to address the increasing rate of breaches targeting SAQ A merchant environments.
What’s Required: If your e-commerce system either:
- Redirects payment transactions to a PCI DSS compliant third-party service provider (TPSP), or
- Includes an embedded payment page/form from a PCI DSS compliant TPSP
You must ensure that external ASV scans are performed at least once every three months and provide evidence of passing these scans.
Resource Guide Available: PCI SSC has provided a comprehensive resource guide to help SAQ (find it below)
Stay Compliant, Stay Secure: These new measures are crucial for minimizing risks and protecting your e-commerce platform from potential vulnerabilities. Ensure you’re up-to-date with the latest standards to safeguard your business and your customers..
For more details, check out the PCI SSC’s latest release HERE
If you are not getting all the answers that you need you can contact our PCI Navigator Team!