{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:TT7XGJMGRH2V77CXPLLSH4P54T","short_pith_number":"pith:TT7XGJMG","schema_version":"1.0","canonical_sha256":"9cff73258689f55ffc577ad723f1fde4ee64a2ffab79950efbf2f3173efb6348","source":{"kind":"arxiv","id":"2512.13430","version":2},"attestation_state":"computed","paper":{"title":"Weak Enforcement and Low Compliance in PCI DSS: A Comparative Security Study","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"John D. Hastings, Soonwon Park","submitted_at":"2025-12-15T15:19:33Z","abstract_excerpt":"Although credit and debit card data continue to be a prime target for attackers, organizational adherence to the Payment Card Industry Data Security Standard (PCI DSS) remains surprisingly low. Despite prior work showing that PCI DSS can reduce card fraud, only 32.4% of organizations were fully compliant in 2022, suggesting possible deficiencies in enforcement mechanisms. This study employs a comparative analysis (qualitative and indicator-based) to examine how enforcement mechanisms relate to implementation success in PCI DSS in relation to HIPAA, NIS2, and GDPR. The analysis reveals that PCI"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2512.13430","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-12-15T15:19:33Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"8ac012a9d90ad2bceb60ffb6fc772c972bc19f7c67b59e4c95734ef09bd73999","abstract_canon_sha256":"976f628dd69326e25f370e9de1268803ceeca04ae6ed0b456ba307f9978013bd"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-02T03:04:36.366787Z","signature_b64":"7hEtbVp6iM8NuGoiLF08ceT4BZkkMEvRnXib+mR+lE3cW3zncfJ0aslHOo+DWlq+zZ5JcxpVAG6bfxkpKipkDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9cff73258689f55ffc577ad723f1fde4ee64a2ffab79950efbf2f3173efb6348","last_reissued_at":"2026-06-02T03:04:36.366247Z","signature_status":"signed_v1","first_computed_at":"2026-06-02T03:04:36.366247Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Weak Enforcement and Low Compliance in PCI DSS: A Comparative Security Study","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"John D. Hastings, Soonwon Park","submitted_at":"2025-12-15T15:19:33Z","abstract_excerpt":"Although credit and debit card data continue to be a prime target for attackers, organizational adherence to the Payment Card Industry Data Security Standard (PCI DSS) remains surprisingly low. Despite prior work showing that PCI DSS can reduce card fraud, only 32.4% of organizations were fully compliant in 2022, suggesting possible deficiencies in enforcement mechanisms. This study employs a comparative analysis (qualitative and indicator-based) to examine how enforcement mechanisms relate to implementation success in PCI DSS in relation to HIPAA, NIS2, and GDPR. The analysis reveals that PCI"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2512.13430","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2512.13430/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2512.13430","created_at":"2026-06-02T03:04:36.366307+00:00"},{"alias_kind":"arxiv_version","alias_value":"2512.13430v2","created_at":"2026-06-02T03:04:36.366307+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2512.13430","created_at":"2026-06-02T03:04:36.366307+00:00"},{"alias_kind":"pith_short_12","alias_value":"TT7XGJMGRH2V","created_at":"2026-06-02T03:04:36.366307+00:00"},{"alias_kind":"pith_short_16","alias_value":"TT7XGJMGRH2V77CX","created_at":"2026-06-02T03:04:36.366307+00:00"},{"alias_kind":"pith_short_8","alias_value":"TT7XGJMG","created_at":"2026-06-02T03:04:36.366307+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T","json":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T.json","graph_json":"https://pith.science/api/pith-number/TT7XGJMGRH2V77CXPLLSH4P54T/graph.json","events_json":"https://pith.science/api/pith-number/TT7XGJMGRH2V77CXPLLSH4P54T/events.json","paper":"https://pith.science/paper/TT7XGJMG"},"agent_actions":{"view_html":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T","download_json":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T.json","view_paper":"https://pith.science/paper/TT7XGJMG","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2512.13430&json=true","fetch_graph":"https://pith.science/api/pith-number/TT7XGJMGRH2V77CXPLLSH4P54T/graph.json","fetch_events":"https://pith.science/api/pith-number/TT7XGJMGRH2V77CXPLLSH4P54T/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T/action/timestamp_anchor","attest_storage":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T/action/storage_attestation","attest_author":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T/action/author_attestation","sign_citation":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T/action/citation_signature","submit_replication":"https://pith.science/pith/TT7XGJMGRH2V77CXPLLSH4P54T/action/replication_record"}},"created_at":"2026-06-02T03:04:36.366307+00:00","updated_at":"2026-06-02T03:04:36.366307+00:00"}