Email Alerts
-
Are PCI auditors pitching products?
SAN FRANCISCO -- Auditors shouldn't be pitching remediation services or products to bring a company into compliance with PCI DSS rules, but some merchants are reporting the practice, according to Diana Kelley, vice president and service director at M... Interview | 27 Jun 2007
-
PCI Council hears complaints, suggestions for changes
Companies with the most stringent security technologies endure hurdles to comply with PCI DSS. Some firms are turning to the upcoming Burton Group Catalyst Conference for answers. Article | 21 Jun 2007
-
Log management push has its roots in compliance
Log management is expected to be a hot topic at the upcoming Burton Group Catalyst Conference. Experts say log data can help organizations comply with numerous guidelines. Article | 20 Jun 2007
-
Database authentication, encryption getting priority in some businesses
While more organizations are seeking database authentication and encryption technologies, others are turning to database monitoring to secure data. Article | 22 May 2007
-
PCI DSS: The standards should not be lowered
Bob Russo, general manager of the PCI Security Standards Council explains that education is crucial to getting more merchants to comply with the standard. Column | 17 May 2007
-
Bloggers not for easing PCI DSS
This week in Security Blog Log: Heeding PCI DSS is hard, but most bloggers think it would be a mistake to dumb it down so more merchants can be in compliance. Column | 11 May 2007
-
Experts: Easing standards like PCI DSS a bad idea
Financial services practitioners say security standards like PCI DSS can be hard to heed, but that easing them would be a bad idea given the data fraud epidemic. Article | 09 May 2007
-
First Data security chief calls for PCI DSS changes
Phil Mellinger, CISO of credit card processing giant First Data Corp. is calling for changes to the standards to speed adoption, ease restrictions and eliminate ambiguous language. Article | 20 Apr 2007
-
Meet the PCI DSS, avoid being the next TJX
The seriousness of the TJX Cos. data breach became even more apparent last week, with the retail giant's admission that at least 45.7 million credit and debit cards were stolen by hackers who were able to penetrate the network over an extended period... Interview | 02 Apr 2007
-
PCI DSS auditors see lessons in TJX data breach
Following the recent TJX data breach, several PCI Data Security Standard auditors say the retailer violated basic requirements of the PCI DSS. But they say there are lessons to be learned from TJX's mistakes. Article | 01 Mar 2007
Security Management Strategies for the CIO