Penetration Testing Guidance - PCI Security Standards

Standard: PCI Data Security Standard (PCI DSS) Version: Date: September 2017 Author: Penetration Test Guidance Special Interest Group PCI Security Standards Council Information Supplement: Penetration Testing Guidance Information Supplement Penetration Testing Guidance September 2017 The intent of this document is to provide supplemental information. Information provided here does not replace or supersede requirements in any PCI SSC Standard. i Document Changes Date Document Version Description Pages March 2015 Initial release All September 2017 A number of clarifications, including: Clarified intent of social engineering in Terminology. Clarified Guidance on black-box Testing . Restructured Section for better flow, and clarified language describing intent of PCI DSS Requirement Expanded Guidance related to back-end APIs. Updated references to PCI SSC resources. Minor grammatical updates.

Typically a variety of automated tools combined with manual verification of identified issues. ... The scope of a penetration test, as defined in PCI DSS Requirement 11.3, include s the entire CDE perimeter and any critical systems. This applies both to the external perimeter (public -facing attack surfaces) and the internal ...

Tags:

  Security, Standards, Testing, Guidance, Automated, Penetration, Pci security standards, Perimeter, Penetration testing guidance

Information

Related search queries