Security Management Strategies for the CIO
Email Alerts
-
Verizon issues PCI self-assessment, support docs
Verizon Business is issuing a PCI self-assessment questionnaire and support documentation as part of its Partner Security Program (PSP). Article | 05 May 2008
-
PCI group addresses assessor issues, vendor challenges
David Taylor of the PCI Security Vendor Alliance, discusses the challenges PCI presents, the newly created PCI Knowledge Base and how the group can help both vendors and companies. Article | 01 May 2008
-
Credit card thieves target small merchants, flawed POS systems, study finds
PCI assessment firm, Trustwave says the report debunks some popular perceptions but others cite flaws in the study. Article | 29 Apr 2008
-
PCI forces companies to seek log management help
Hard-pressed corporations are turning to service providers as well as product vendors to bring log data together and make management easier. Article | 24 Apr 2008
-
PCI Council issues clarification on Web application security
The PCI Security Standards Council released documentation hoping to reduce a tide of confusion over enforcement of application firewalls and code reviews. Article | 22 Apr 2008
-
Next version of PCI DSS due in September
PCI Security Standards Council GM Bob Russo says tweaks and clarifications are expected in the areas of wireless and application security. Article | 10 Apr 2008
-
RSA attendees see data classification, rights management projects stumble
SAN FRANCISCO -- Companies need to embark on data classification projects to gain more control over its movement and minimize data leakage, but it's difficult to find a company successfully carrying out a project. Rena Mears, Deloitte's global and U.... Interview | 10 Apr 2008
-
Hannaford breach illustrates dangerous compliance mentality
As Executive Editor Dennis Fisher explains, the Hannaford supermarket breach illustrates how too much emphasis on compliance puts critical data at risk. Column | 02 Apr 2008
-
Tough questions on PCI DSS: Private networks, self-assessment and segmentation
Due to an overwhelming number of audience questions during his live question-and-answer session, Security Curve Founding Partner Ed Moyle was unable to answer all of them during SearchSecurity.com's recent virtual trade show on PCI DSS. In this Q&A, ... Interview | 01 Apr 2008
-
TJX faces data audits for 20 years under FTC settlement
TJX Cos Inc. agreed to implement tighter security and obtain independent audits every other year for 20 years, according to a settlement reached with the Federal Trade Commission. Article | 28 Mar 2008