Tag
PCI DSS, page 2
27 articles
Security engineering
Least privilege in practice
Every framework asks for least privilege and none says how. Designing roles, finding excess access, separating duties on a small team, and proving all of it.
6 min read
Security engineering
Enforcing MFA for every user
Turning MFA on is easy. Proving it covers every account is not. Where coverage breaks, which factors hold up, and the MFA evidence auditors actually test.
7 min read
Compliance frameworks
What changed in PCI DSS 4.0
PCI DSS 4.0 added a customized approach, targeted risk analysis and new requirements for MFA and payment pages. What changed, and what 4.0.1 clarified.
6 min read