These efforts are more connected than they may appear.
The PCI Security Standards Council’s mapping of PCI DSS v4.0.1 to NIST CSF 2.0 gives organizations a way to understand how meeting PCI DSS requirements can contribute to NIST CSF outcomes. The frameworks remain distinct, but the controls and evidence supporting them can overlap.
Connect Payment-Page Controls to Enterprise Risk
Third-party JavaScript operates inside the customer’s browser, where it may access form fields, modify page content, load additional scripts, or transmit data to external destinations.
PCI DSS addresses this risk directly through requirements for script authorization, inventory, integrity, and change detection. The same work can support NIST CSF objectives related to software assets, supply chain oversight, platform security, and continuous monitoring.
This webinar will show you how those relationships work and where Source Defense capabilities fit.
What You’ll Learn
- How PCI DSS 6.4.3 and 11.6.1 map to NIST CSF 2.0
- Which NIST subcategories have the strongest connection to payment-page controls
- How script inventory supports software asset and supply chain risk management
- How continuous monitoring supports third-party and runtime visibility
- How data transmission reporting identifies unexpected destinations
- How redacted, isolated, and blocked modes limit unauthorized script activity
- How to use a cross-framework matrix with security, GRC, and executive stakeholders
The session will focus on eight strong mappings across GOVERN, IDENTIFY, PROTECT, and DETECT, while also identifying five additional NIST CSF subcategories supported by the PCI DSS requirements.
Who Should Attend
This webinar is designed for:
- CISOs, CIOs, and CROs
- GRC and compliance leaders
- Security program managers and directors
- Security architects and SecOps teams
- Application security and web security teams
- Organizations preparing for PCI DSS assessments
- Teams using NIST CSF to measure or report cybersecurity progress
About the Presenter
Randy Paszek
Head of Solutions Engineering, Source Defense
Randy leads solutions engineering at Source Defense and works with organizations evaluating client-side security, payment-page protection, and PCI DSS compliance strategies. During this session, he will translate the PCI-to-NIST mapping into practical controls, evidence, and program outcomes.
Leave With a Practical Mapping
All attendees will receive access to a downloadable matrix connecting:
- PCI DSS 6.4.3 and 11.6.1
- Selected NIST CSF 2.0 subcategories
- Source Defense client-side security capabilities
- The practical outcome supported by each control