It requires at least an annual review and evidence that the program specifically covers phishing and social engineering, not just generic security content.
HRM glossary
PCI DSS 12.6
PCI DSS v4.0 requirement on awareness programs that must include phishing.
Definition
Phisher — A phisher is a cybercriminal who tricks people into revealing sensitive information through phishing and social engineering.
Phishing simulation — A controlled lure to measure actual behavior, not the declared one.
QRishing — Phishing via QR code: the lure asks you to scan, not to click a link.
Ransomware (simulated) — A simulated attachment that would encrypt files, to measure the act of opening it without checking.
HRM glossary
Questions about PCI DSS 12.6
What is PCI DSS 12.6?
PCI DSS v4.0 requirement on awareness programs that must include phishing.
How does Whalemate use it?
It requires at least an annual review and evidence that the program specifically covers phishing and social engineering, not just generic security content.
Want to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.