Email Alerts
-
PCI DSS Compliance: Debating the benefits, unintended consequences Part 2
Can critics of PCI DSS can get along with proponents of the standard? Gene Kim of Tripwire Inc. and Martin McKeay of Verizon, explain what can be learned by studying the effects of PCI DSS compliance. Video
-
Massachusetts levies data breach fines against restaurant group
Massachusetts Attorney General Martha Coakley announced a $110,000 settlement against the owner of several Boston area bars for failing to secure its patrons' personal information. Article
-
PCI DSS 2011: Key themes to watch
Thanks to the debut of PCI DSS 2.0, interest in PCI compliance is likely at an all-time high. Senior Site Editor Eric B. Parizo discusses why in his look at key PCI DSS 2011 issues. Column
-
PCI DSS questions answered: Solutions to tough PCI problems
Experts Diana Kelley and Ed Moyle answer your PCI DSS questions and give advice on how to solve your enterprise's toughest PCI problems. Tip
-
Mobile payments prompt response from PCI DSS Council
Technologies that enable credit card payments via mobile phones have prompted the PCI Council to start a mobile task force. Article
-
The effects of PCI DSS, compliance requirements on the security industry
Paul Judge of Barracuda Networks and Joshua Corman of the 451 Group discuss whether compliance hinders the creation of innovative security technologies. Article
-
PCI requirement 7: PCI compliance policy for access control procedures
Though PCI DSS is generally prescriptive, when it comes to requirement 7, organizations have more leeway -- and, thus, more potential for error -- than other sections of the standard. Learn how to handle PCI DSS requirement 7 in this expert tip. Tip
-
Cost of non-compliance outweighs cost of maintaining compliance, report finds
A study by the Ponemon Institute found that the average total cost of compliance is more than $3.5 million. Article
-
PCI survey finds more compliance spending planned to meet guidelines
A survey of 500 security professionals found that although the compliance initiatives are burdensome, they are improving security at most organizations. Article
-
PCI encryption requirements: Limiting PCI scope with P2P encryption
P2P encryption, or encryption of data in transit, has long been a point of confusion for PCI DSS-bound merchants. In this tip, expert Ed Moyle explains the PCI SSC's recent guidance on P2P encryption. Tip
Security Management Strategies for the CIO