SecurityMetrics, a leading innovator in compliance and cybersecurity, is offering guidance and solutions to merchants with compliance needs, following new updates made to the SAQ A eligibility by the PCI Council.
The PCI Council recently added to the PCI Standard which determines the eligibility of an SAQ A, stating, “The merchant has confirmed that their site is not susceptible to attacks from scripts that affect the merchants ecommerce systems.” These requirements used to be included in the SAQ A, but have now been removed and added instead to the merchant eligibility criteria section for SAQ A.
Also Read: The Arbitrage Opportunity of Small Language Models: Unlocking AI Efficiency and Performance
Tommy Pfister, SecurityMetrics Product Manager, stated, “With the revised SAQ A requirements, we’re providing merchants with a targeted solution without adding unnecessary complexity. Our optimized test transaction isolates indicators of compromise on their ecommerce platform, removing the burden of detailed script justifications. This provides both SAQ A eligibility assurance and ecommerce checkout security validation without needing to install an agent on each merchant’s website.”
To determine if script protections are being met, beginning March 25, 2025, SecurityMetrics offers a simplified solution that’s provided inside their PCI compliance portal called Shopping Cart Monitor. For SAQ A merchants, Shopping Cart Monitor provides a targeted test transaction to ensure merchants are fulfilling the eligibility requirements. Part of this test transaction includes checking for indicators of compromise on their ecommerce platform. The tool also removes the necessity to provide written justification and authorization for each script to streamline this process, making it as easy as possible for merchants to reach PCI compliance.
Shopping Cart Monitor meets PCI requirements 6.4.3 and 11.6.1, without requiring an agent, software installation, development, compatibility testing, or website configuration. As a fully-integrated PCI solution, Shopping Cart Monitor was designed to save money and time.
Latest News: Oracle Releases Java 24
SecurityMetrics secures peace of mind for organizations that handle sensitive data. They have tested over 100 million systems for data security and compliance. Industry standards don’t keep up with the threat landscape, which is why SecurityMetrics hold their tools, training, and support to a higher, more thorough standard of performance and service. Never have a false sense of security.™
[To share your insights with us as part of editorial or sponsored content, please write to psen@itechseries.com]
