{"id":18304,"date":"2023-03-10T09:18:54","date_gmt":"2023-03-10T14:18:54","guid":{"rendered":"https:\/\/www.jumpcloud.com\/?p=18304"},"modified":"2023-08-30T09:10:14","modified_gmt":"2023-08-30T13:10:14","slug":"preparing-for-your-pci-dss-audit-with-jumpcloud","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud","title":{"rendered":"Preparing for Your PCI DSS Compliance Audit"},"content":{"rendered":"\n<p>For any company involved with credit card transactions, the Payment Card Industry Data Security Standard (PCI DSS) audit is the IT admin\u2019s annual hurdle. In order to be compliant, system administrators need to make sure their networks are up to snuff. So, when approaching your PCI day (or weeks\/months, in reality) of reckoning, it\u2019s important to make sure you understand what you\u2019re up against and how best to prepare.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading1\">Who Is Eligible?<\/h2>\n\n\n\n<p>The PCI DSS standards generally apply to anyone who accepts, transmits, or stores cardholder data. Essentially, anyone who takes credit card payments is subject to PCI DSS. However, the standards differ based on the number of transactions organizations process: the more transactions, the more rigorous the standards.&nbsp;<\/p>\n\n\n\n<p>Eligible organizations are broken into four categories, or levels, based on how many credit card transactions they process per year. Level 1 is subject to the most rigorous standards, and Level 4 is subject to the least rigorous.&nbsp;&nbsp;<\/p>\n\n\n\n<ul>\n<li>Level 1: 6 million + transactions<\/li>\n\n\n\n<li>Level 2: 1-6 million transactions<\/li>\n\n\n\n<li>Level 3: 20 thousand -1 million transactions<\/li>\n\n\n\n<li>Level 4: Under 20K transactions<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Does PCI DSS Apply to All Cards?<\/h3>\n\n\n\n<p>Technically, no. PCI DSS compliance is driven by credit card issuers. All major credit card issuers require PCI DSS compliance. These include:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Visa&nbsp;<\/li>\n\n\n\n<li>Mastercard<\/li>\n\n\n\n<li>Discover<\/li>\n\n\n\n<li>American Express&nbsp;<\/li>\n\n\n\n<li>Japan Credit Bureau (JCB)<\/li>\n<\/ul>\n\n\n\n<p>Other cards may choose to align with PCI DSS, or they may define their own set of rules. If your organization processes credit cards from other issuers, make sure you understand the issuer\u2019s specified standards.<\/p>\n\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/image-1-1-aspect-ratio-160-110-1.png\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n            The IT Manager\u2019s Guide to Data Compliance Hygiene        <\/p>\n        <p class=\"is-type-body-default is-important\">\n            How to ace your audit        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/resources\/data-compliance-guide\" data-promo=\"Data Compliance Hygiene\" class=\"button is-primary-green promo-small-banner-link\">Get the Guide <\/a>\n    <\/div>\n<\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading2\">The 12 Requirements of PCI DSS Compliance<\/h2>\n\n\n\n<p>PCI DSS is defined by 12 main requirements of compliance, each of which has many subcategories and steps associated with it.&nbsp;<\/p>\n\n\n\n<ol>\n<li>Install and maintain network security controls.<\/li>\n\n\n\n<li>Apply secure configurations to all system components.<\/li>\n\n\n\n<li>Protect stored account data.<\/li>\n\n\n\n<li>Protect cardholder data with strong cryptography during transmission over open, public networks.&nbsp;<\/li>\n\n\n\n<li>Develop and maintain secure systems and software.<\/li>\n\n\n\n<li>Protect systems and software from malicious software.<\/li>\n\n\n\n<li>Restrict access to system components and cardholder data on a \u201cneed to know\u201d basis.<\/li>\n\n\n\n<li>Identify users and authenticate access to system components.<\/li>\n\n\n\n<li>Restrict physical access to cardholder data.<\/li>\n\n\n\n<li>Log and monitor all access to system components and cardholder data.&nbsp;<\/li>\n\n\n\n<li>Test security systems and networks regularly.<\/li>\n\n\n\n<li>Maintain ongoing security with organizational policies and programs.&nbsp;<\/li>\n<\/ol>\n\n\n\n<p>These 12 requirements can be broken down into six key objectives. Consider treating these six objectives as your overarching PCI DSS compliance goals as you develop your compliance plan.&nbsp;<\/p>\n\n\n\n<ul>\n<li><strong>Secure networks and systems.<\/strong><br>Make sure your groundwork is secure so that anything you do with payment info is done over a secure network and with secure systems. This includes both implementing and maintaining these elements. Requirements one and two fall under this objective:\n<ul>\n<li>1. Install and maintain network security controls.<\/li>\n\n\n\n<li>2. Apply secure configurations to all system components.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Protect account data.<\/strong><strong><br><\/strong>Protect the critical account and cardholder data, both in transit and at rest. This includes requirements three and four:\n<ul>\n<li>3. Protect stored account data.<\/li>\n\n\n\n<li>4. Protect cardholder data with strong cryptography during transmission over open, public networks.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Ongoing vulnerability management<\/strong><strong><br><\/strong>Protect the controls you put in place with ongoing vulnerability management. This includes requirements five and six:\n<ul>\n<li>5. Develop and maintain secure systems and software.<\/li>\n\n\n\n<li>6. Protect them from malicious software.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Access control<\/strong><strong><br><\/strong>Access control is one of the most important elements of security, as it both limits sanctioned access and reduces the chances of malicious access.\n<ul>\n<li>7. Restrict access to system components and cardholder data by Need to Know.<\/li>\n\n\n\n<li>8. Identify users and authenticate access to system components<\/li>\n\n\n\n<li>9. Restrict physical access to cardholder data.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Network monitoring and testing<\/strong><br>Ensure ongoing security by monitoring and testing regularly.\n<ul>\n<li>10. Log and monitor all access to system components and cardholder data.&nbsp;<\/li>\n\n\n\n<li>11. Test security systems and networks regularly.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Information security policies<\/strong><br>This category embodies the final requirement:\n<ul>\n<li>12. Maintain ongoing security with organizational policies and programs.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading3\">The PCI DSS Audit Process<\/h2>\n\n\n\n<p>When you start preparing for a PCI DSS audit, it\u2019s helpful to know what to expect. This can help you define goals and benchmarks.&nbsp;<\/p>\n\n\n\n<p>The PCI DSS standards outline six major steps to achieving compliance:<\/p>\n\n\n\n<ol>\n<li><strong>Scope: <\/strong>Determine the scope of your PCI DSS assessment. Note that scope can be narrowed by segmenting the cardholder data environment (CDE) from the rest of the organization\u2019s network. As the PCI DSS standards put it: \u201cAt a high level, adequate segmentation isolates systems that store, process, or transmit account data from those that do not.\u201d<\/li>\n<\/ol>\n\n\n\n<ol start=\"2\">\n<li><strong>Assess:<\/strong> Assess the environment\u2019s alignment with PCI DSS standards.&nbsp;<\/li>\n<\/ol>\n\n\n\n<ol start=\"3\">\n<li><strong>Report:<\/strong> Complete the applicable assessment report according to PCI DSS guidance and instructions. <a href=\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#SAQ\">Read on to learn more<\/a>.&nbsp;<\/li>\n<\/ol>\n\n\n\n<ol start=\"4\">\n<li><strong>Attest: <\/strong>Complete the Attestation of Compliance (AoC) based on the findings in steps 2 and 3. <a href=\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#AoC\">Read on to learn more about AoCs<\/a>.<\/li>\n<\/ol>\n\n\n\n<ol start=\"5\">\n<li><strong>Submit documentation:<\/strong> This includes any SAQ, RoC, and AoC, as well as any other requested documentation.<\/li>\n<\/ol>\n\n\n\n<ol start=\"6\">\n<li><strong>Remediate: <\/strong>If there were any identified gaps, work on remediating them so they end up in compliance with PCI DSS. Provide an updated report once remediated controls are in place.&nbsp;<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"SAQ\">SAQ<\/h3>\n\n\n\n<p>The self-assessment questionnaire (SAQ) is to be completed by the organization undergoing the PCI DSS audit. It\u2019s designed to enable the organization to self-declare its compliance standing and means for accomplishing compliance.&nbsp;<\/p>\n\n\n\n<p>Organizations that fall under Levels 2-4 must complete an SAQ, which can take the place of an external audit. Level 1 companies must instead undergo an external audit.&nbsp;<\/p>\n\n\n\n<p>There are many different SAQs designed for different types of organizations. <a href=\"https:\/\/listings.pcisecuritystandards.org\/documents\/Understanding_SAQs_PCI_DSS_v3.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Review the different types<\/a> to determine which SAQ is right for your organization.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">RoC<\/h3>\n\n\n\n<p>The RoC, or Report on Compliance, is a reporting tool that documents the results of a PCI DSS assessment. The RoC is to be completed by an external Qualified Security Assessor (QSA) or an Internal Security Assessor (ISA), which is an internal employee who has received their ISA qualification through <a href=\"https:\/\/www.pcisecuritystandards.org\/program_training_and_qualification\/internal_security_assessor_certification\/\" target=\"_blank\" rel=\"noreferrer noopener\">official PCI DSS training<\/a>. The RoC is typically required for all Level 1 organizations and some Level 2 organizations.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"AoC\">AoC&nbsp;<\/h3>\n\n\n\n<p>The PCI Attestation of Compliance (AoC) is the PCI SSC form that attests to an organization\u2019s compliance. The AoC can come from either the SAQ or the RoC.&nbsp;&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading4\">Navigating PCI DSS Requirements<\/h2>\n\n\n\n<p>The 12 main requirements, outlined above, are broken down into several individual requirements. PCI DSS standards outline the following information for each requirement:&nbsp;<\/p>\n\n\n\n<ul>\n<li><strong>Requirement:<\/strong> This specifies the rule or standard you must comply with. It is usually stated as a concise and strategic outcome.<br><em>Example (Requirement 1.3): \u201cNetwork access to and from the cardholder data environment (CDE) is restricted.\u201d&nbsp;<\/em><\/li>\n\n\n\n<li><strong>Defined Approach: <\/strong>PCI DSS standards grant you the flexibility to choose <em>how <\/em>you comply. As such, it lays out both a <em>defined<\/em> approach and a <em>customized<\/em> approach for each requirement. The <em>defined<\/em> approach specifies the means by which you must meet a requirement.<br><em>Example (Requirement 1.3): Inbound traffic to the CDE is restricted as follows:&nbsp;<\/em><\/li>\n<\/ul>\n\n\n\n<p><em>A. To only traffic that is necessary.<\/em><\/p>\n\n\n\n<p><em>B. All other traffic is specifically denied.&nbsp;<\/em><\/p>\n\n\n\n<ul>\n<li><strong>Customized Approach: <\/strong>In contrast to the defined approach, the customized approach offers general guidelines for the requirement and allows you meet them however best suits your organization.<\/li>\n<\/ul>\n\n\n\n<p><em>Example (Requirement 1.3): Unauthorized traffic cannot enter the CDE.&nbsp;<\/em><\/p>\n\n\n\n<ul>\n<li><strong>Testing Procedure: <\/strong>The testing procedures state how the defined approach can be tested for compliance.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p><em>Example (Requirement 1.3): <\/em><em><\/em><em> <\/em><em><\/em><em> <\/em><em><\/em><em> <\/em><em><\/em><em> <\/em><em><\/em><em> <\/em><em><\/em><em><\/em><\/p>\n\n\n\n<ol>\n<li><em>Examine configuration standards for network security controls (NSCs) to verify that they define restricting inbound traffic to the CDE is in accordance with all elements specified in this requirement. <\/em><em><\/em><em> <\/em><em><\/em><em> <\/em><em><\/em><\/li>\n\n\n\n<li><em>Examine configurations of NSCs to verify that inbound traffic to the CDE is restricted in accordance with all elements specified in this requirement.&nbsp;<\/em><\/li>\n<\/ol>\n\n\n\n<ul>\n<li><strong>Guidance: <\/strong>The guidance section offers context, tips, and helpful information for each requirement.<\/li>\n<\/ul>\n\n\n\n<p><em>Example (Requirement 1.3)<\/em>: The guidance for requirement 1.3 contains information regarding the requirement\u2019s purpose, a summary of relevant good practices, and examples of how a rule might be configured to satisfy the requirement.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading5\">Start with Strong Fundamentals<\/h2>\n\n\n\n<p>The PCI DSS standards largely align with basic security best practices. Fortunately, you may already be doing many of them. If you have any <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-iam\">identity and access management (IAM) <\/a>solutions in place, for instance, you\u2019re already equipped to comply with many of the PCI DSS standards.<\/p>\n\n\n\n<p>Requirement 1.3, for example, specifies that the CDE should only be accessible to necessary traffic, and all other traffic should be specifically denied. With the right IAM solution, an organization could create a rule that denies all access to the CDE unless a user belongs to a specific user group for necessary CDE traffic.&nbsp;<\/p>\n\n\n\n<p>A strong baseline of security and identity management will not only help you ace this audit, but it will also make compliance \u2014 with PCI DSS and other regulations \u2014 more painless in the future. That\u2019s because many IT and security compliance principles are based on the same security fundamentals. Increasingly, these fundamentals align with Zero Trust security, a security approach that centers around the identity rather than the outdated physical perimeter. <a href=\"https:\/\/jumpcloud.com\/blog\/it-compliance-regulations-demystified\">Learn more about Zero Trust security.<\/a>&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading6\">More Compliance Guidance for IT Professionals<\/h2>\n\n\n\n<p>IT compliance doesn\u2019t always come naturally to IT professionals \u2014 but it does tend to fall on their plate at one time or another. To learn more about how to build the right foundation for ongoing compliance, tackle audits coming your way, and even take free a hands-on course to implement common compliance controls in your environment, check out JumpCloud\u2019s <a href=\"https:\/\/jumpcloud.com\/resources\/it-compliance-quickstart-guide\" target=\"_blank\" rel=\"noreferrer noopener\">IT Compliance Quickstart Guide<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn how to approach your PCI DSS compliance audit by understanding the requirements, process, and outcomes.<\/p>\n","protected":false},"author":144,"featured_media":18307,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"collection":[2775],"platform":[],"funnel_stage":[3015],"coauthors":[2532],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Preparing for Your PCI DSS Compliance Audit - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to approach your PCI DSS compliance audit by understanding the requirements, process, and outcomes.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Preparing for Your PCI DSS Compliance Audit\" \/>\n<meta property=\"og:description\" content=\"Learn how to approach your PCI DSS compliance audit by understanding the requirements, process, and outcomes.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-10T14:18:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-30T13:10:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"512\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kate Lake\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kate Lake\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud\"},\"author\":{\"name\":\"Kate Lake\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/f8e192cbcdde7ffa4bc2f96c48ceda78\"},\"headline\":\"Preparing for Your PCI DSS Compliance Audit\",\"datePublished\":\"2023-03-10T14:18:54+00:00\",\"dateModified\":\"2023-08-30T13:10:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud\"},\"wordCount\":1578,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud\",\"url\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud\",\"name\":\"Preparing for Your PCI DSS Compliance Audit - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png\",\"datePublished\":\"2023-03-10T14:18:54+00:00\",\"dateModified\":\"2023-08-30T13:10:14+00:00\",\"description\":\"Learn how to approach your PCI DSS compliance audit by understanding the requirements, process, and outcomes.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png\",\"width\":1024,\"height\":512},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Preparing for Your PCI DSS Compliance Audit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/f8e192cbcdde7ffa4bc2f96c48ceda78\",\"name\":\"Kate Lake\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/46cab796831a4f3fb686940689408879\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/49d664ae369f57340f0165a652ddb04b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/49d664ae369f57340f0165a652ddb04b?s=96&d=mm&r=g\",\"caption\":\"Kate Lake\"},\"description\":\"Kate Lake is a Senior Content Writer at JumpCloud, where she writes about JumpCloud\u2019s cloud directory platform and trends in IT, technology, and security. She holds a Bachelors in Linguistics from the University of Virginia and is driven by a lifelong passion for writing and learning. When she isn't writing for JumpCloud, Kate can be found traveling, exploring the outdoors, or quoting a sci-fi movie (often all at once).\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Preparing for Your PCI DSS Compliance Audit - JumpCloud","description":"Learn how to approach your PCI DSS compliance audit by understanding the requirements, process, and outcomes.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud","og_locale":"en_US","og_type":"article","og_title":"Preparing for Your PCI DSS Compliance Audit","og_description":"Learn how to approach your PCI DSS compliance audit by understanding the requirements, process, and outcomes.","og_url":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud","og_site_name":"JumpCloud","article_published_time":"2023-03-10T14:18:54+00:00","article_modified_time":"2023-08-30T13:10:14+00:00","og_image":[{"width":1024,"height":512,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png","type":"image\/png"}],"author":"Kate Lake","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kate Lake","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud"},"author":{"name":"Kate Lake","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/f8e192cbcdde7ffa4bc2f96c48ceda78"},"headline":"Preparing for Your PCI DSS Compliance Audit","datePublished":"2023-03-10T14:18:54+00:00","dateModified":"2023-08-30T13:10:14+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud"},"wordCount":1578,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud","url":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud","name":"Preparing for Your PCI DSS Compliance Audit - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png","datePublished":"2023-03-10T14:18:54+00:00","dateModified":"2023-08-30T13:10:14+00:00","description":"Learn how to approach your PCI DSS compliance audit by understanding the requirements, process, and outcomes.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/08\/pablo-58.png","width":1024,"height":512},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/preparing-for-your-pci-dss-audit-with-jumpcloud#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Preparing for Your PCI DSS Compliance Audit"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/f8e192cbcdde7ffa4bc2f96c48ceda78","name":"Kate Lake","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/46cab796831a4f3fb686940689408879","url":"https:\/\/secure.gravatar.com\/avatar\/49d664ae369f57340f0165a652ddb04b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/49d664ae369f57340f0165a652ddb04b?s=96&d=mm&r=g","caption":"Kate Lake"},"description":"Kate Lake is a Senior Content Writer at JumpCloud, where she writes about JumpCloud\u2019s cloud directory platform and trends in IT, technology, and security. She holds a Bachelors in Linguistics from the University of Virginia and is driven by a lifelong passion for writing and learning. When she isn't writing for JumpCloud, Kate can be found traveling, exploring the outdoors, or quoting a sci-fi movie (often all at once).","sameAs":["https:\/\/jumpcloud.com\/blog"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/18304"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/144"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=18304"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/18304\/revisions"}],"predecessor-version":[{"id":96712,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/18304\/revisions\/96712"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/18307"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=18304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=18304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=18304"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=18304"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=18304"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=18304"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=18304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}