API Security & Compliance: Implicit and explicit requirements for data protection

The emergence of APIs as a major compliance issue is not surprising. Exposed or misconfigured APIs are prevalent, easy to compromise, and often unprotected. And just one breached API can result in millions of records being stolen. 

That is why evolving regulations like PCI DSS v4.0, GDPR, and DORA clearly focus on securing the applications and infrastructure within which APIs operate. It is implied that your organization must: 

This white paper explores the nature of growing API risks, highlights six examples of regulations and frameworks that require API protections (either explicitly or implicitly), and offers advice on how to meet compliance requirements through API security best practices.