Perhaps the most vilified of all the Payment Card Industry Data Security Standard (PCI DSS) requirements is number 11 — that all organizations accepting payment must perform quarterly scans by an approved scan vendor. These are also known as ASV vulnerability scans. But that’s not all, either. If your organization accepts payment cards, regardless of what level you’re at, compliance is a must.
