Data Loss Prevention (DLP) Scanning
Data Loss Prevention (DLP) Scanning: A process of monitoring and preventing sensitive data from leaving
a company environment.
Phishing: A form of social engineering where an attempt to acquire sensitive information (for example,
passwords, usernames, payment card details) from an individual through e-mail, chat, or other means. The
perpetrator often pretends to be someone trustworthy or known to the individual.
Privileged Access: Users who generally have elevated rights or access above that of a general user.
Typically, privileged access is given to those users who need to perform administrative-level functions or
access sensitive data, which may include access to cardholder data (CHD). Privileged Access may
encompass physical and/or logical access.
Social Engineering: As defined by (ISC) 2 : An attack based on deceiving users or administrators at the target
site—for example, a person who illegally enters computer systems by persuading an authorized person to
reveal IDs, passwords, and other confidential information.
The intent of this document is to provide supplemental information. Information provided here does not replace or supersede requirements in any PCI SSC Standard.
