# PCI DSS Published articles for PCI DSS. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## AWS Security Reference Architecture: A deep dive into PCI DSS compliance DevFeed: [AWS Security Reference Architecture: A deep dive into PCI DSS compliance]() Original publisher: [Read original article]() Author: Avik Mukherjee Published: 2026-09-14T17:46:56Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services](), [Security](), [Architecture & Design](), [Network Segmentation](), [Encryption](), [Logging](), [Access Control](), [Cloud]() Tags: [access-control](), [amazon-web-services](), [announcements](), [architecture](), [compliance](), [encryption](), [foundational-100](), [logging](), [network-segmentation](), [pci-dss](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview AWS announces the AWS Security Reference Architecture (AWS SRA) PCI DSS Deep Dive, a guide that extends the core AWS SRA with prescriptive architecture-level guidance for organizations handling cardholder data on AWS. It explains how AWS SRA patterns address PCI DSS concerns including account scoping, network segmentation, encryption, logging, and access control. ### Source excerpt Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations that store, process, or transmit cardholder data on AWS. Organizations subject to [...] ## How Ninth Wave built AI-powered open finance onboarding on Amazon Bedrock DevFeed: [How Ninth Wave built AI-powered open finance onboarding on Amazon Bedrock]() Original publisher: [Read original article]() Author: Shawn Kelly Published: 2026-09-14T15:58:57Z Content type: article Language: en Sources: [Artificial Intelligence]() Topics: [Amazon Bedrock AgentCore](), [Artificial Intelligence](), [API](), [Architecture & Design](), [Security](), [Finance](), [Amazon Web Services](), [data]() Tags: [advanced-300](), [ai](), [amazon-bedrock](), [amazon-bedrock-agentcore](), [apis](), [customer-solutions](), [fintech](), [onboarding](), [pci-dss](), [security](), [soc-2]() ### AI overview The article describes how Ninth Wave built Compass, a multi-agent AI onboarding assistant powered by Amazon Bedrock AgentCore. Compass helps financial institutions validate bank APIs, map fields to Financial Data Exchange standards, and score production readiness while supporting secure, compliant open finance connectivity. ### Source excerpt Learn how Ninth Wave built Compass, a multi-agent AI onboarding assistant on Amazon Bedrock AgentCore that validates bank APIs against Financial Data Exchange (FDX) standards, scores compliance, and compresses open finance onboarding from weeks to minutes while meeting SOC 2 and PCI DSS requirements. ## Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL DevFeed: [Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL]() Original publisher: [Read original article]() Author: Koray Oksay Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Kubernetes](), [Platform Engineering](), [Security](), [developer velocity](), [Containers](), [supply-chain-security](), [YAML](), [opa](), [rego]() Tags: [common-expression-language](), [compliance](), [container-images](), [containers](), [cosign](), [deployment](), [developer-velocity](), [governance](), [hipaa](), [integration](), [kubernetes](), [kyverno](), [pci-dss](), [platform](), [policy](), [security](), [security-policies](), [sigstore](), [soc-2](), [supply-chain-security]() ### AI overview A guide to using Kyverno and its Common Expression Language support for Kubernetes governance. It explains how platform engineering teams can enforce policies, automate resource changes, generate resources, verify image signatures, and maintain security and compliance while preserving developer velocity. ### Source excerpt Kyverno with CEL support provides Policy-as-Code for Kubernetes governance. Enforce security, automate guardrails, and boost developer velocity for platform engineering teams. ## Announcing the CIS Benchmark for CockroachDB v25.x DevFeed: [Announcing the CIS Benchmark for CockroachDB v25.x]() Original publisher: [Read original article]() Author: Adam Brennick,Ayog Mohanty Published: 2026-07-14T00:00:00Z Content type: release Language: en Sources: [Cockroach Labs]() Topics: [Benchmark](), [CockroachDB](), [Security](), [Cockroach Labs](), [configuration](), [Cybersecurity](), [Database](), [Self-hosted]() Tags: [announce](), [benchmark](), [cockroach-labs](), [cockroachdb](), [compliance](), [configuration](), [fedramp](), [government](), [hipaa](), [pci-dss](), [published](), [security](), [security-best-practices](), [security-research](), [self-hosted](), [standard]() ### AI overview The Center for Internet Security has published the CIS CockroachDB v25.x Benchmark, providing a consensus-driven security configuration guide for self-hosted CockroachDB deployments. The article explains how the benchmark can support standardized security practices, audits, compliance reviews, and production configuration validation. ### Source excerpt We're proud to announce that the Center for Internet Security (CIS) has published the CIS CockroachDB v25.x Benchmark. ## Hosted vs Self-Hosted Payment Gateway: Which Is Right for Your SaaS? DevFeed: [Hosted vs Self-Hosted Payment Gateway: Which Is Right for Your SaaS?]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-06-08T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Self-hosted](), [Software as a service](), [Shared Responsibility Model](), [API]() Tags: [api](), [architecture](), [compliance](), [gateway](), [payment-gateway](), [payments](), [pci-dss](), [saas](), [self-hosted]() ### AI overview This guide compares hosted and self-hosted payment gateways for SaaS products. Hosted gateways keep card-data collection on the provider's infrastructure, reducing PCI DSS scope and integration work, while self-hosted gateways provide more control over checkout and customer experience but require greater compliance effort. Client-side tokenization can keep raw card data out of the backend. ### Source excerpt Hosted vs self-hosted payment gateway compared. PCI scope, control, integration speed, and which model fits SMB SaaS, enterprise, and global product-led companies. ## Embedded Payments for SaaS Platforms: A 2026 Implementation Guide DevFeed: [Embedded Payments for SaaS Platforms: A 2026 Implementation Guide]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-04-29T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [API](), [tokenization](), [ui](), [Mobile]() Tags: [2026](), [api](), [app](), [architectures](), [checkout](), [compliance](), [conversion](), [guide](), [integration](), [mobile](), [patterns](), [payment](), [payments](), [pci-dss](), [platform](), [regulatory](), [revenue](), [saas](), [subscription]() ### AI overview A 2026 guide to implementing embedded payments in SaaS platforms. It compares inline checkout, modal overlays, and raw card APIs, with attention to PCI compliance, regulatory obligations, fraud, settlement risk, support, and implementation patterns. ### Source excerpt How modern SaaS platforms add embedded payments without becoming a payments company. Architectures, compliance, revenue share, and implementation patterns. ## PCI DSS Compliance: What Digital Businesses Need to Know DevFeed: [PCI DSS Compliance: What Digital Businesses Need to Know]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-04-15T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Security](), [Social engineering](), [Network Segmentation](), [TLS (Transport Layer Security)](), [vulnerability management](), [SIEM, Security](), [Software as a service](), [tokenization]() Tags: [compliance](), [digital-products](), [firewalls](), [mfa](), [network-segmentation](), [pci-dss](), [saas](), [scope](), [security](), [siem](), [tls](), [tokenization](), [vulnerability-management]() ### AI overview This guide explains how PCI DSS applies to digital businesses that accept card payments, including SaaS companies and sellers of digital products. It outlines the standard's 12 requirements and discusses controls for networks, account data, vulnerabilities, access, monitoring, and information security. It also covers card-not-present transactions, recurring billing, and tokenization. ### Source excerpt PCI DSS compliance explained for digital businesses. Understand the 12 requirements, compliance levels, and how to reduce your scope when selling digital products online. ## Scaling Payments in the Age of Real-Time Fraud: Building a Resilient Foundation for Fintech DevFeed: [Scaling Payments in the Age of Real-Time Fraud: Building a Resilient Foundation for Fintech]() Original publisher: [Read original article]() Author: Becca Weng Published: 2026-02-25T00:00:00Z Content type: article Language: en Sources: [Cockroach Labs]() Topics: [systems](), [Architecture & Design](), [Resilience](), [Availability](), [consistency](), [Low Latency](), [data]() Tags: [fintech](), [high-availability](), [latency](), [outages](), [payments](), [pci-dss](), [real-time](), [security](), [sensitive-data]() ### AI overview This article explains why fintech payment systems require resilient architectures that preserve atomic data updates, maintain low latency during demand spikes, support global regulatory and data-residency requirements, and provide high availability and security. It also introduces real-time fraud detection as an added source of complexity. ### Source excerpt Fintech is one of the most competitive and highly regulated industries in the world. Whether you're a payment processor, digital-first bank, trading platform, or wallet provider, your infrastructure is directly tied to customer trust. In this environment, outages aren't just technical incidents; a single missed transaction, delayed authorization, or moment of downtime can erode customer confidence instantly. ## Forrester TEI study: Chainguard Containers delivered 233% return on investment DevFeed: [Forrester TEI study: Chainguard Containers delivered 233% return on investment]() Original publisher: [Read original article]() Published: 2026-02-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [container-security](), [chainguard](), [vulnerability management](), [Containers](), [Vulnerabilities](), [Application Security](), [Open Source]() Tags: [chainguard](), [chainguard-containers](), [chainguard-forrester](), [chainguard-roi](), [chainguard-value](), [cmmc](), [compliance](), [container-security](), [containers](), [forrester-tei](), [open-source](), [pci-dss](), [security](), [vulnerabilities](), [vulnerability-management]() ### AI overview A Forrester Consulting Total Economic Impact study commissioned by Chainguard reports that customers using Chainguard Containers achieved a 233% return on investment over three years, with $2.5 million in benefits and payback in less than six months. The article attributes these results to reduced vulnerabilities, simpler maintenance, and lower compliance overhead, supported by minimal zero-CVE container images and automated remediation. ### Source excerpt Explore the latest Forrester Consulting Total Economic Impact™ (TEI) study, commissioned by Chainguard. ## Ensuring Compliance and Governance in Kubernetes for Banking Workloads DevFeed: [Ensuring Compliance and Governance in Kubernetes for Banking Workloads]() Original publisher: [Read original article]() Author: Urolime Technologies Published: 2025-11-04T12:50:33Z Content type: article Language: en Sources: [Kubernetes Archives - Urolime Blogs]() Topics: [Kubernetes](), [Security](), [Orchestration](), [Containers](), [Cloud Native Ecosystem](), [Scalability](), [Availability]() Tags: [banking](), [cloud-native](), [compliance](), [containers](), [gdpr](), [governance](), [kubernete](), [kubernetes](), [orchestration](), [pci-dss](), [security](), [soc-2](), [zero-trust]() ### AI overview This article examines how Kubernetes can support compliance and governance for banking workloads. It describes benefits such as scalability, high availability, and fault tolerance, while identifying governance and security challenges involving complex configurations, dynamic workloads, regulatory requirements, and audit visibility. It highlights Kubernetes consulting services and zero-trust network policies as relevant practices. ### Source excerpt In the fast-paced banking era, data security and compliance is not a choice, but a necessity. Here Kubernetes has emerged as an adaptable platform to govern the containerized workloads. Its scalable, fault-tolerant application orchestration feature has proven it to be the ideal choice for the industry. In this blog we will analyze on how Kubernetes [...] ## Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster DevFeed: [Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster]() Original publisher: [Read original article]() Published: 2025-10-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Application Security](), [open-source-security](), [Open Source](), [Software](), [chainguard]() Tags: [chainguard](), [chainguard-containers](), [chainguard-security](), [cmmc](), [compliance](), [cves](), [fedramp](), [iso-27001](), [open-source-software](), [pci-dss](), [security](), [soc-2](), [stateramp]() ### AI overview This article explains how organizations can treat software compliance as a continuous practice rather than a periodic audit exercise. It describes how open-source components, CVE remediation, provenance, SBOM coverage, and audit evidence affect platform engineering, application security, development velocity, and regulated-market access, while presenting Chainguard as a solution provider. ### Source excerpt Turn compliance into a growth driver with Chainguard. Eliminate CVEs, stay audit-ready, and meet FedRAMP, SOC 2, and ISO 27001 with secure images. ## How Snyk Learn Helps You Meet PCI DSS v4.0 Developer Training Requirements DevFeed: [How Snyk Learn Helps You Meet PCI DSS v4.0 Developer Training Requirements]() Original publisher: [Read original article]() Author: Michael Biocchi; Celia Jenkins Published: 2025-09-23T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [Security](), [Vulnerabilities](), [Testing](), [Software Engineering]() Tags: [awareness](), [blog](), [compliance](), [developer](), [developers](), [pci-dss](), [pci-dss-v4-0](), [pmm](), [reviews](), [security](), [snyk-learn](), [testing](), [training](), [vulnerabilities]() ### AI overview The article explains how Snyk Learn supports PCI DSS v4.0.1 developer training requirements. It describes relevant, just-in-time security lessons linked to coding mistakes, along with training on secure coding, security testing, code reviews, and software vulnerabilities. ### Source excerpt Discover how Snyk Learn helps organizations meet PCI DSS v4.0 developer training requirements by providing relevant, just-in-time, interactive, and trackable security education for developers. ## HIPAA and PCI Compliance at ClickHouse DevFeed: [HIPAA and PCI Compliance at ClickHouse]() Original publisher: [Read original article]() Author: Leticia Webb Published: 2025-08-05T14:06:20Z Content type: news Language: en Sources: [ClickHouse Blog]() Topics: [clickhouse](), [Cloud](), [Security](), [data]() Tags: [clickhouse](), [cloud](), [compliance](), [data](), [healthcare](), [pci-dss](), [security]() ### AI overview ClickHouse announces the general availability of self-service HIPAA and PCI deployments in ClickHouse Cloud. The article explains safeguards for protected health information and payment card data, including compliance with HIPAA requirements and PCI DSS Level 1 Service Provider standards. ### Source excerpt HIPAA and PCI self-service deployments are now generally available in ClickHouse Cloud ## The Difference Between Postgres Logging and PGAudit DevFeed: [The Difference Between Postgres Logging and PGAudit]() Original publisher: [Read original article]() Author: Monica Steinke Published: 2025-05-28T20:26:29Z Content type: article Language: en Sources: [Blog -- Neon Docs]() Topics: [Logging](), [PostgreSQL](), [Monitoring](), [Databases]() Tags: [audit](), [compliance](), [config](), [hipaa](), [iso](), [logging](), [logs](), [monitoring](), [pci-dss](), [postgres](), [process](), [server]() ### AI overview The article compares PostgreSQL's built-in logging with PGAudit. PostgreSQL logging supports operational monitoring and troubleshooting, while PGAudit is designed for compliance auditing with detailed records of database access and changes. It describes PGAudit's session and object auditing modes and the information recorded in audit log entries. ### Source excerpt Postgres has some excellent internal logging capabilities. With a simple logging_collector = on and a couple of other config flags, you can get an incredibly detailed picture of your Postgres operations, from individual SQL statements to connection attempts, error messages, and l... ## Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance DevFeed: [Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance]() Original publisher: [Read original article]() Author: Snyk Team Published: 2025-03-20T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security, Privacy and Abuse Prevention](), [DevSecOps](), [vulnerability management](), [Artificial Intelligence](), [Automation](), [threat detection](), [cloud-infrastructure](), [Cybercrime]() Tags: [ai](), [application-security](), [automation](), [blog](), [cloud-infrastructure](), [community](), [compliance](), [customer](), [customer-featured](), [data-privacy](), [devsecops](), [executive](), [financial-services](), [finserv](), [interest](), [pci-dss](), [security](), [soc-2](), [threat-detection](), [vulnerability-management]() ### AI overview This article distills a fireside-chat discussion about application security challenges in financial services, featuring Snyk's Field CTO and CIBC's Senior Director of Security Service Management. It covers the tension between rapid innovation and strict compliance, risks from cybercrime, data privacy, cloud infrastructure, third-party services, legacy systems, and modern applications, and the role of automation, continuous security testing, monitoring, DevSecOps, AI-driven tools, and human oversight in vulnerability management. ### Source excerpt Join Snyk's Field CTO, Steven Schmidt, and Mihai Saveschi, Senior Director of Security Service Management at CIBC, for an exclusive fireside chat on the evolving landscape of application security in financial services. ## Chainguard Images are the Gold Standard for PCI DSS v4.0 DevFeed: [Chainguard Images are the Gold Standard for PCI DSS v4.0]() Original publisher: [Read original article]() Published: 2025-02-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container-security](), [Containers](), [supply-chain-security](), [vulnerability management]() Tags: [chainguard](), [chainguard-images](), [chainguard-sboms](), [compliance](), [container](), [container-image](), [container-image-compliance](), [container-images](), [container-security](), [containers](), [cryptography](), [financial](), [pci-dss](), [pci-dss-v4-0](), [sboms](), [software-bill-of-materials](), [software-composition-analysis](), [software-supply-chain](), [stig](), [vulnerability](), [vulnerability-management]() ### AI overview The article explains how Chainguard Images can support selected PCI DSS v4.0 container-security controls. It focuses on asset and vulnerability management, hardened images, FIPS cryptography, build-time SBOMs, software supply chain inventory, and continuously updated containers. ### Source excerpt Chainguard Images are designed to make container image compliance for PCI DSS v4.0 easy for any company involved in card transactions. ## Mastering the "compliance end run" with Chainguard Images DevFeed: [Mastering the "compliance end run" with Chainguard Images]() Original publisher: [Read original article]() Published: 2024-07-30T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [chainguard](), [container images](), [vulnerability management]() Tags: [chainguard](), [chainguard-images](), [compliance](), [container](), [container-images](), [fedramp](), [fedramp-rev-5](), [pci-dss](), [secure-container-images](), [vulnerabilities](), [vulnerability-management]() ### AI overview The article explains how the "compliance end run" shifts responsibility for software compliance to customers who run a vendor's stack in their own environments. It highlights the resulting vulnerability-management obligations under PCI DSS v4 and FedRAMP Rev 5, and presents Chainguard Images as a minimal, secure starting point for reducing vulnerabilities and meeting stringent compliance requirements. ### Source excerpt Learn how to use Chainguard Images to streamline compliance and avoid the "compliance end run" that slows down sales and creates friction with customers. ## STIG hardening container images DevFeed: [STIG hardening container images]() Original publisher: [Read original article]() Published: 2024-06-07T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Security](), [chainguard images](), [Containers](), [chainguard]() Tags: [chainguard](), [chainguard-images](), [compliance](), [container-security](), [containers](), [false-positives](), [fedramp](), [hardened-image](), [hardening](), [pci-dss](), [security](), [security-technical-implementation-guide](), [stig](), [stig-hardening]() ### AI overview The article discusses hardening container images against STIG requirements, including how to distinguish controls that apply to containers from those that apply to the host operating system or Docker service. It also notes that false positives can occur in container security scans. ### Source excerpt Dive into the world of STIG hardening for container images. Explore expert insights, practical tips, and Chainguard solutions to fortify your container security. ## Achieve PCI DSS v4.0 compliance with Chainguard Images DevFeed: [Achieve PCI DSS v4.0 compliance with Chainguard Images]() Original publisher: [Read original article]() Published: 2024-05-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [vulnerability management](), [Vulnerabilities](), [container images]() Tags: [chainguard](), [chainguard-images](), [compliance](), [container](), [pci-dss](), [pci-dss-v4-0](), [security](), [vulnerabilities](), [vulnerability-management]() ### AI overview This article explains how Chainguard Images can support PCI DSS v4.0 compliance for payment applications. It outlines updated vulnerability-management requirements, including recurring vulnerability scans, risk-based classification, coverage of third-party software, and remediation planning. ### Source excerpt Navigating PCI DSS v4.0 compliance? Chainguard Images simplifies the process with secure, compliant container images for your payment applications. ## How Data Protection Requirements Discourage Excessive Customer Data Hoarding DevFeed: [How Data Protection Requirements Discourage Excessive Customer Data Hoarding]() Original publisher: [Read original article]() Published: 2024-04-20T04:35:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [data](), [Security]() Tags: [customer](), [data](), [data-protection](), [gdpr](), [pci-dss](), [security](), [worth-reading]() ### AI overview The article argues that data protection requirements such as PCI-DSS and GDPR primarily discourage companies from retaining excessive customer data by making data hoarding expensive, rather than directly making companies more secure. ### Source excerpt Another lovely must-read rant from the cranky security professional. TL&DR: Data protection requirements like PCI-DSS aren't there to make companies more secure but to make it too expensive for them to hoard excessive customer data (see also: GDPR). ## Into the deep: Exploring Chainguard Container Images DevFeed: [Into the deep: Exploring Chainguard Container Images]() Original publisher: [Read original article]() Published: 2023-11-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [container images](), [supply-chain-security](), [vulnerability management](), [Containers](), [Vulnerabilities](), [Security](), [soc2]() Tags: [base-images](), [chainguard](), [chainguard-images](), [compliance](), [container-image](), [container-images](), [pci-dss](), [sboms](), [soc2](), [software-supply-chain](), [supply-chain](), [supply-chain-security](), [vulnerabilities](), [vulnerability-management]() ### AI overview Chainguard Images provide value beyond low CVE counts by supporting software supply chain security. The article discusses rapid CVE remediation through Wolfi, enterprise remediation SLAs, compliance requirements, and the use of trusted minimal base images to reduce supply chain attack risk. ### Source excerpt Learn how Chainguard Images go beyond reducing CVE count in your software supply chain, with hardened container images, SBOMs, and more. ## My Career Pivot: From IT recruiter to information security DevFeed: [My Career Pivot: From IT recruiter to information security]() Original publisher: [Read original article]() Author: Skyscanner Engineering Published: 2022-06-24T08:08:19Z Content type: article Language: en Sources: [Stories by Skyscanner Engineering on Medium]() Topics: [Security](), [Cybersecurity]() Tags: [career](), [engineering](), [female-engineers](), [information-security](), [pci-dss](), [security](), [security-engineering](), [women-in-tech]() ### AI overview This profile follows Maria Sepulveda's career transition from customer service and IT recruitment into information security. As a Senior Security Engineer at Skyscanner, she discusses her role, career development, and responsibility for leading the recertification of the company's PCI DSS compliance. ### Source excerpt Senior Security Engineer Maria Sepulveda As we celebrate International Women in Engineering Day this week, we're profiling female-identifying engineers across our business. Maria Sepulveda is a Senior Security Engineer at Skyscanner. An expert within information security, Maria led the recertification of Skyscanner's PCI DSS (Payment Card Industry data Security Standard) compliance. Maria took an unconventional path to information security, starting her career in customer service and IT recruitment. Here, she discusses her journey, imposter syndrome and what her role looks like today. Maria, as a Senior Security Engineer, what does your role involve? Well, I only recently joined Skyscanner so a typical day for me today might look different to a typical day in a couple of months time! Having said that, I have already been given responsibility to lead the recertification of our PCI-DSS compliance. It's great that I can be trusted so early on in my Skyscanner journey. My day typically starts with following up on tasks that are due in the coming week. During the day I meet with people and various teams to understand what they do. I'll also attend internal events, often to better understand the Skyscanner culture and the way things work here -- as well as to make connections. Focus Time in the afternoon allows me to re-read my notes and absorb information I obtained during the day. The day might end with a recap of the day with my team, allowing me to ask questions I haven't already asked or just generally talk about how the day went. What was your career journey to this point? I took an unconventional path into information security. Originally from Australia, I worked in customer service roles and IT recruitment. I arrived in London and found a job working at an in-house recruitment team for an online betting company. I knew that I wanted to move into a more tech-focussed role but still interfacing with the business. My colleague who was recruiting for the security team ## What Is PCI Compliance? DevFeed: [What Is PCI Compliance?]() Original publisher: [Read original article]() Author: info@goteleport.com (Allan MacGregor) Published: 2022-05-26T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Security](), [Requirements](), [Software as a service](), [Transactions](), [data]() Tags: [article](), [best-practices](), [blog-post](), [compliance](), [e-commerce](), [fraud](), [payment](), [pci-dss](), [saas](), [security](), [standards]() ### AI overview This article explains PCI compliance and the PCI DSS requirements for organizations that accept, transmit, or store cardholder data. It describes the standard's purpose, security practices, breach response, certification, and how requirements vary by transaction volume. ### Source excerpt In this blog post we'll look at the PCI compliance standards and how to use PCI standards to ensure your business is compliant. ## Implementing Square's Payment Form in Reaction Commerce DevFeed: [Implementing Square's Payment Form in Reaction Commerce]() Original publisher: [Read original article]() Author: Richard Moot Published: 2018-01-12T00:59:44Z Content type: tutorial Language: en Sources: [Square Corner Blog RSS Feed]() Topics: [Meteor](), [JavaScript](), [Web Development](), [Open Source]() Tags: [apis](), [checkout](), [ecommerce](), [how-to](), [implementation](), [javascript](), [library](), [open-source](), [payment](), [pci-dss](), [security]() ### AI overview This tutorial explains how to implement Square's SqPaymentForm JavaScript library in Reaction Commerce. The hosted form captures payment information in an iframe and returns a nonce token that can be used with Square's APIs, while the article addresses Meteor's handling of external scripts. ### Source excerpt Get Square's payment form implemented in your Reaction Commerce App