pci_dss

Welcome to the 'pci_dss' tag page at Technorati. This page features content from the farthest reaches of the Blogosphere that authors have "tagged" with 'pci_dss'.

Latest blogosphere posts tagged “pci_dss”

• Is Information Protection Even Possible?

  
  Information Security Resources — Authority: 476
  By Danny Lieberman , Security Expert and Founder of Software Associates A Few Months ago I saw an article in ComputerWeekly that asked – Is data loss prevention possible? “Data is out of control in the corporate world…I think… the only way that we can have influence on the likelihood of (data ...
  1 week ago

• Facta Non Verba

  
  Society of Payment Security Professionals - Payment Security Blog — Authority: 91
  I thought I would leave everyone with a quote from Froissart to end the year…when measuring people that freely give advice and hold themselves out as ‘experts’ it is suggested that you look at those who have gained their expertise through experience as opposed to theory.“There were young knights among them ...
  1 week ago

• Why There Will Be No Year Of The Cloud

  
  Information Security Resources — Authority: 476
  By Dwayne Melancon , Tripwire’s VP of Corporate and Business Development I recently got an email talking about “the year of the cloud.” I call shenanigans. You see, I remember back in the olden days (back in the 1980’s) when magazines and industry luminaries would regularly declare each year to be ...
  2 weeks ago

• Data Breaches Show PCI DSS Ineffective

  
  Information Security Resources — Authority: 476
  By Danny Lieberman , Security Expert and Founder of Software Associates A recent Ponemon survey ( pci-dss-survey-key-findings-final4 ) found 71% of companies don’t consider PCI as strategic, though 79% had experienced a breach. Are these companies assuming that a data security breach is cheaper than the ...
  2 weeks ago

• PCI DSS Auditors | You Need to hire a Qualified Security Assessor (QSA)

  
  Regulatory Compliance, Governance and Security — Authority: 103
  The term PCI DSS auditors is technically incorrect, as one really should be looking for a Payment Card Industry Data Security Standard (PCI DSS) Qualified Security Assessor (QSA). So what really is a QSA ? A QSA is an individual who has been through the rigorous training and certification process that is overseen ...
  2 weeks ago

• PCI Compliance Roadmap | Readiness Assessment | Where to Begin

  
  Regulatory Compliance, Governance and Security — Authority: 103
  Looking for a PCI compliance Roadmap ? As a Payment Card Industry Data Security Standards Qualified Security Assessor (PCI QSA), I’m often asked about the who, what, where, and why of PCI compliance. Most organizations (merchants and service providers) are simply overwhelmed with the entire process and are not too ...
  2 weeks ago

• 2010 Compliance Laws

  
  DISC Infosec blog — Authority: 114
  Image by purpleslog via FlickrIn 2010 there will be two important compliance laws introduced which will affect the majority of North American organizations and many global organization too.45 US... [[ This is a content summary only. Visit my website for full links, other content, and more! ]]
  3 weeks ago

• British Security Defense Manual Leaked…

  
  Payment Card Security & IT Controls Explained — Authority: 91
  The British government had their Defence Manual of Security (2001) leaked to the internet on October 4, 2009.  The press and wikileaks provide a great breakdown of the information within it, and it is fairly accessible to those interested.  What strikes me as interesting is not that it is in the public space now, ...
  4 weeks ago

• Hackers steal credit-card numbers from restaurant customers

  
  DISC Infosec blog — Authority: 114
  Amazon.com WidgetsHere we have another unnecessary credit card data breach in a small organization which resulted in a loss of customers data demonstrating poor baseline security of small... [[ This is a content summary only. Visit my website for full links, other content, and more! ]]
  4 weeks ago

• SAS 70 Audits and PCI DSS Assessments | Expert Advice from an Auditor

  
  Regulatory Compliance, Governance and Security — Authority: 103
  SAS 70 audits and PCI DSS assessments are truly starting to dominate the regulatory compliance landscape. For a large number of our firm’s clients, we actively assess them for yearly SAS 70 and PCI DSS compliance. The chatter of late is surrounding what efficiencies of scale, if any, can be had by conducting both ...
  4 weeks ago

• Radiant Systems and VAR being sued for Data Compromises

  
  Society of Payment Security Professionals - Payment Security Blog — Authority: 91
  A recent press release announced that Radiant Systems and a reseller of their products called Computer World are being sued in a class action suit for “millions of dollars” for issues that resulted in hundreds of instances of identity theft.  This is a very interesting wrinkle in the PCI DSS space.  Those of us ...
  4 weeks ago

• PCI Qualified Security Assessor | How to Choose a QSA

  
  Regulatory Compliance, Governance and Security — Authority: 103
  Need a PCI Qualified Security Assessor ? Curious as to how to choose a QSA? First and foremost, make sure the QSA has ample experience in performing on-site PCI DSS Level 1 assessments for merchants and service providers. Additionally, make sure the QSA has ample knowledge of policies and procedures, or can at ...
  5 weeks ago

• 12 PCI Requirements | What you Need to Know for PCI DSS

  
  Regulatory Compliance, Governance and Security — Authority: 103
  The 12 PCI requirements are essentially the areas that merchants and service providers will need to be compliant with regarding the Payment Card Industry Data Security Standards (PCI DSS) provisions. What’s important to note is that each and every requirement has very explicit “requirements” for what truly ...
  5 weeks ago

Comments about pci_dss