Governance, risk & compliance

PCI DSS SAQ B-IP v4.0.1

For merchants using only standalone, PCI PTS-approved point-of-interaction (POI) terminals with an IP connection to the payment processor.

No electronic cardholder data storage. Terminals must be segmented from other network devices.

How Lavawall® helps you get to PCI DSS SAQ B-IP compliance

Most of PCI DSS SAQ B-IP comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to PCI DSS SAQ B-IP, and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against PCI DSS SAQ B-IP in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Training courses for PCI DSS SAQ B-IP

The Lavawall® training catalogue has 13 courses that cover it. Assign them to the people they apply to and keep the completion records with the rest of your compliance evidence.

• PCI DSS B-IP: Security for Receptionists and Front-Desk Staff (20 min)
• PCI DSS Executive Overview: B-IP Merchants (15 min)
• PCI DSS Executive Overview: Web-Based Merchants (15 min)
• PCI SAQ A for Business Owners & Managers (Outsourced Online Payments) (16 min)
• PCI SAQ A-EP: E-Commerce Developer Security (22 min)
• PCI SAQ A: Web Developer Card Data Security (20 min)

See these courses in the training catalogue →

Related

Lavawall® supports PCI DSS SAQ B-IP as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.