Tyndora for PCI DSS

Network security controls (firewalls and equivalents) restrict traffic into and out of the cardholder data environment.

Harden systems and remove vendor defaults so components are not deployed with exploitable settings.

Minimize stored account data and render the primary account number unreadable wherever it is kept.

Encrypt the primary account number whenever it travels across open, public networks.

Deploy and maintain anti-malware and anti-phishing defenses across in-scope systems.

Build software securely and remediate known vulnerabilities through patching and change control.

Grant access on a least-privilege, need-to-know basis and review it regularly.

Assign unique IDs, enforce strong authentication, and require MFA for access into the CDE.

Control physical entry to facilities and protect media and payment devices from tampering.

Capture audit logs of activity, protect them, and review them to detect anomalies.

Scan for vulnerabilities, perform penetration testing, and detect intrusions and page tampering.

Maintain governing policies, risk analysis, awareness training, and incident response.