PCI DSS mandates penetration testing as part of Requirement 11, which focuses on regularly testing security systems and processes. This includes both internal and external penetration tests to identify and exploit vulnerabilities that could potentially lead to unauthorized access to cardholder data. Penetration testing helps ensure that network and application defenses are effective and that security controls are functioning properly. It also includes network segmentation testing to ensure cardholder data (CHD) is isolated and protected from the broader internal network.
To see what other standards apply to these industries, follow any of the links, or browse all compliance standards we support.