PCI SSF
Module C: Web Software Requirements – PCI SSF

PCI SSF C.3.1: Secure Software Standard C.3.1 (Web Software Attack Mitigation)

To defend its internet-facing interfaces, the software applies, or at least allows the use of, current HTTP security headers.

Maintained by Gerard BlokdykControl text last updated

Other controls in Module C: Web Software Requirements – PCI SSF

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI SSF controls