Re: PCI-DSS Requirements

On 9/20/22 04:27, Inzamam Shafiq wrote:

P {margin-top:0;margin-bottom:0;}

Hi Team,

Anyone on PCI-DSS requirements for PostgreSQL DB, need help for some of the points.

Can you be more specific?  (Typically. the auditors or the "audit pre-check" team will ask for a bunch of details on how your instance is configured.)

The usual questions I get are:
- What password hash algorithm is used?
- How frequently to passwords expire?
- Is SSL used when communicating with applications?