Tag
PCI DSS
4 articles tagged “PCI DSS”.
-
Provider Incident Evidence Retention: Keep It Past 90 Days
AWS, Azure, Google, Cloudflare and GitHub drop most incident history within 30-90 days. How to keep provider evidence for SOC 2, SOX and PCI change audits.
-
PCI DSS 6.4.3: Payment-Page Scripts as a Change-Control Problem
PCI DSS 6.4.3 and 11.6.1 have been mandatory since March 2025. Here is how to wire payment-page script authorization into your change process.
-
The Compensating Controls Register Auditors Accept
You deferred a control and promised a compensating one. Here is the register entry that PCI, SOC 2, and NIST assessors sign off on instead of flagging.
-
Risk-Based Patching: How to Defend It to an Auditor
You skipped a Critical CVSS because EPSS said low-risk. Here is the evidence trail that keeps a PCI, SOC 2, or SOX auditor satisfied.