In this post we highlight the benefits of multi-signature wallets and applying the CCSS to the design and management of a multi-sig wallet.What is a Multi-Sig Wallet?When conducting a transaction on a blockchain, the transaction is signed by the initiator of the transaction with their private key. The signed transaction is then validated by [...]
It’s finally happened – on April 1st NZ time, PCI DSS v4.0 was released, and then on April 28th we saw the Self-Assessment Questionaries released. In this post we cover at a high level what’s changed and what stays the same. What Stays the Same The good thing about the SAQs is that the [...]
Service providers have always had a slightly different focus in PCI DSS because as a service provider you have the ability to impact your customers’ PCI DSS compliance and overall security. Whether that’s through providing certain managed services like managed firewalls or data centres, your customers expect you to be able to demonstrate that [...]
What is a CCSSA? CCSSA stands for CryptoCurrency Security Standard Auditor. If you pass the CCSS auditor certification exam and are accepted into the CCSSA program, then you can audit systems under CCSS that implement a cryptocurrency wallet. As of the date of this article (April 2022), the CCSS auditor exam is still [...]
The term "crypto" covers the fast-growing sector which includes cryptocurrencies, DEFI, metaverses, NFTs, cryptocurrency exchanges and numerous other innovations. What has become apparent over the short time this sector has grown out of a cyberpunks project into a valid replacement for fiat as a unit of exchange and a store of value is [...]
What is CryptoCurrency Security Standard (CCSS)? The word "crypto" was initially used as an abbreviation of cryptocurrency. However, with the growth of cryptocurrency and the creation of new protocols, standards, assets such as NFT and finance services aimed at cryptocurrency such as DEFI. "Crypto" is now used to encompass the entire sector of cryptographic-based [...]
Supporting Your Customers As a service provider, your customers are always looking for more information about which requirements they are responsible for and which ones you're responsible for. Some service providers have provided responsibility matrix documents, others have provided their AoC, others have provided other documents. But in v4.0, there's a new requirement [...]
What's New in Version 4? There's a lot of new things in version 4. In fact, there are 64 new requirements that you might be looking at by 31 March 2025. New Requirements for Merchants New Requirements for Service Providers New Requirements Applicable When You Use v4 (by March 2024) New Requirements [...]
How Often is Periodic The term "periodic" is not new to PCI DSS. But in Version 4, we see a new approach that wraps more governance around the meaning of periodic in Section 7 of PCI DSS V4.0. Periodic becomes a measure that is unique to every organisation. Governance plays a big role [...]
Let's Talk About Passwords If there's one thing that we know people have been waiting for, it's finding out whether PCI DSS would finally modernise password requirements. We are so excited to finally be able to tell you what's coming up in the Version 4 changes for passwords (in fact, some of these [...]
