Home Header Image

PCI DSS Support Center

Quick answers to frequently asked questions

Transition period to PCI DSS 4.0

Transition period to PCI DSS 4.0

Find out useful information about the transition period from PCI DSS version 3.2.1 to the new version 4.0.

» Will the SAQ I have completed in PCI v3.2.1 expire on April 1, 2024?

» Are there completely new requirements that must be implemented immediately?

» Is it possible that I did not have to perform ASV scans according to v3.2.1, but according to the new requirements in v4.0 my company is obligated to scan?

My Account

Manage your account and keep your data current.

» I am new here: What are my first steps?

» Is there a way that multiple people can access one account and be informed about the status of the scans?

» I need assistance with my PCI DSS compliance verifiction. What support or consulting does usd AG offer?

PCI Assessment & SAQ

PCI Assessment & SAQ

Get familiar with the requirements for PCI compliance.

» What is the PCI classification for?

» I need to renew my SAQ. Can I transfer the data from the previous year?

» How can I view the data of my SAQ from the previous year?

Scan Preparation

Scan Preparation

Learn which preparations and information are necessary for your PCI DSS security scan.

» Which systems or scan components need to be examined during a ASV Scan?

» What are the technical requirements to enable an ASV scan by usd AG?

» How do I schedule an ASV Scan?

Scan Conduction

Scan Conduction

Information about the conduction of a scan, further processing and a possible rescan.

» How long does the actual scanning process take?

» What does an ASV scan process look like?

» My scan has been performed. When will I receive my result from the review?

Scan Results and Findings

Scan Results and Findings

You can find references and possible solutions to frequently occurring vulnerabilities as well as information about your scan results here.

» What does compliant mean?

» Why are there watermarks with "Scan Report not confirmed" on my reports?

» Is TLSv1.0 or TLSv1.1 considered PCI DSS compliant?

Security

Central questions regarding the security of your data in the course of a scan.

» Are my systems hacked during the security scan?

» Does the scan make a break-in attempt on my system?

» How are my systems checked over the internet?

Things to know about PCI DSS

Things to know about PCI DSS

This answers base questions regarding the Payment Card Industry Data Security Standard.

» What is the PCI DSS?

» How often do I have to provide the PCI DSS validation?

» Why is PCI DSS compliance so important?

Miscellanious

You can find additional topics about PCI DSS security scans here.

» How do I use the Security Seal for my website?

» The Security Seal shows the wrong date. Shouldn't it display the date when my compliance expires?

» I have achieved PCI DSS compliance, but the Security Seal does not update. What can I do?