The most talked about and concerning new requirements in PCI DSS 4.0 fall under sections 6.4.3 and 11.6.1. For the first time, merchants are required to implement security controls to prevent eSkimming attacks. These new requirements require control of all scripts running on merchant eCommerce websites. In this new whitepaper “A Holistic Approach to Protecting Credit Card Payment Flows,” CoalFire chimes in with background on the problem, guidance on scope, advice on how best to secure credit card data in eCommerce transactions, and a review of the Source Defense approach.
"Coalfire has determined that the Source Defense platform can offer value for proactive and reactive risk management..."
CoalFire helps remove any confusion related to the scope of 6.4.3 and 11.6.1 – it is about payment flows!
Hear from one of the most respected names in the PCI DSS Compliance industry on all things eSkimming security.
Get guidance from CoalFire on ways to approach the eSkimming security requirements found in 6.4.3 and 11.6.1
Don’t leave your e-commerce payment security to chance. Get access to the full whitepaper and take the first step towards a more secure online payment process.
As a PCI Participating Organization and the pioneer in eSkimming security, Source Defense played a role in the development of new requirements for web security found in PCI DSS 4.0.
We’ve helped thousands of the world’s leading brands address these issues. We’ve also been educating merchants, QSAs, PSPs, eCommerce Platform providers and virtually every stakeholder in PCI compliance on the vulnerabilities in modern website design that make eSkimming attacks possible. We’ve made it our misison to provide guidance around ambiguity in the standard; advise on the pros and cons of approaches provided by the council and we recently launched a free assessment, monitoring and management solution for both merchants and their QSAs.
