Erik from PCICompliance.com 
How to Choose an ASV Bottom Line Up Front If you just received a PCI compliance questionnaire from your payment processor and you’re wondering what an ASV is (and whether you need one), here’s what matters: an ASV is an Approved Scanning Vendor that runs quarterly security scans on your network. If you accept credit … Read more
What Is Sensitive Auth Data? Bottom Line Up Front If you just received a PCI compliance questionnaire from your payment processor and you’re feeling overwhelmed, here’s the good news: for most small businesses, PCI compliance is actually simpler than it sounds. Sensitive authentication data (SAD) is one of those scary-sounding terms that’s actually straightforward — … Read more
Bottom Line Up Front If you just received a PCI compliance questionnaire from your payment processor and you’re feeling overwhelmed, take a breath. For most small businesses, achieving PCI compliance is simpler than you think — often just a matter of answering a short questionnaire about how you accept payments and running a quarterly security … Read more
What Is a Compensating Control? Bottom Line Up Front If you’re reading this because your payment processor just asked about compensating controls in your PCI compliance questionnaire, here’s the good news: most small businesses don’t need compensating controls at all. These are basically workarounds for when you can’t meet a specific PCI requirement exactly as … Read more
What Is PAN Truncation? A Complete Guide for Small Business Owners Bottom Line Up Front If you just received a PCI compliance questionnaire from your payment processor and you’re wondering what PAN truncation means, here’s the simple answer: it’s a way to display only part of a credit card number (like XXXX-XXXX-XXXX-1234) to keep the … Read more
What Is Network Segmentation? Bottom Line Up Front If you just received a PCI compliance questionnaire from your payment processor and saw something about “network segmentation,” don’t panic. Here’s the truth: network segmentation is simply keeping your credit card processing systems separate from everything else on your network — like having a locked cash register … Read more
Outdated POS Terminal PCI Compliance: What Your Business Needs to Know Your Old Card Terminal and PCI Compliance That credit card terminal sitting on your counter might be putting your business at risk — not just from security threats, but from compliance fines and lost ability to process payments. If you’ve received a confusing questionnaire … Read more
CDN Impact on PCI Compliance: What Your Small Business Needs to Know Relax. If you just opened an email from your payment processor about PCI compliance and your first thought was “What on earth is this?”, you’re not alone. Here’s the truth: for most small businesses, PCI compliance is much simpler than it sounds. You … Read more
What Evidence for SAQ? A Simple Guide to PCI Compliance for Small Businesses Your Payment Processor Just Sent You a Compliance Questionnaire — Now What? If you just received a PCI compliance questionnaire from your payment processor and your first thought was “What on earth is this?” — you’re not alone. Every day, thousands of … Read more
Completed Wrong SAQ The Bottom Line Up Front If you completed the wrong SAQ for your PCI compliance, don’t panic — you’re not the first business to choose the wrong questionnaire, and fixing it is usually straightforward. The most common mistake is selecting an SAQ that’s either too complex (like choosing SAQ D when you … Read more