PCI DSS DMARC Requirement: What Section 5.4.1 Requires

john_strinlai

this article takes more time to read than dmarc takes to implement

CodesInChaos

> The best practice is a policy banning PAN over email, instant messaging, SMS, and chat entirely. Sounds silly to me. A PAN should never even touch an employee's computer.

tptacek

Kind of a weird post, since it acknowledges in the first 1/3rd that you don't need DMARC for PCI compliance.

fragmede

two words: compensating control. (But also setup dmarc)

yonatan8070

Took me too long to realize this has nothing to do with the Peripheral Component Interconnect or Direct Memory Access