category:

PCI DSS

Article

PCI Acronym Reference Guide

To help you understand the lingo behind compliance, here are some of the most common terms you might hear in reference to PCI and what exactly they are referring to.

PCI DSS
Read More about the PCI Acronym Reference Guide
Article

Life After P2PE

You have made the decision to deploy a PCI-listed Point-to-Point Encryption (P2PE) solution on campus. No more worrying about PCI compliance, right? Wrong.

PCI DSS
P2PE Solutions about the Life After P2PE
Article

Incorporating PCI into Your InfoSec Program

Once PCI DSS compliance is part of your business-as-usual, concerns about cardholder data security are reduced. But what about personal health information, or personally identifiable information like social security numbers, birth dates, addresses, etc.?

Compliance
PCI InfoSec Components about the Incorporating PCI into Your InfoSec Program
Article

Incident Response: Does Your Plan Pass the Test?

It is important that your plan includes specific steps in the event of a cardholder data breach. Creating an initial draft of your plan can be a little overwhelming, but breaking it up into smaller components can help you manage the effort and ensure you are covering all of your bases.

Incident Response
Does Your Plan Pass the Test? about the Incident Response: Does Your Plan Pass the Test?
Article

What is a QSA?

QSAs have a deep understanding of the PCI DSS, the processes involved in card processing, network segmentation, payment card brand validation and reporting requirements, hardware and communications infrastructure, compliance issues, and effective mitigation strategies.

PCI DSS
Read More about the What is a QSA?
Article

Printers, Copiers, Scanners, and Fax Machines: The Not So Hidden Risks

These devices have hard drives full of unencrypted information that may be of interest to criminals. If sensitive information is being inadvertently stored on the machine, criminals may easily be able to access and download this critical data from the machine without your knowledge.

Cybersecurity
Read More about the Printers, Copiers, Scanners, and Fax Machines: The Not So Hidden Risks
Article

Awareness Training: Don’t Just Check the Box

Even with all of the advanced technology and software applications available today, your biggest vulnerability is and will remain your employees. That means that the training is not only required, but plays a critical security role in your organization.

Online Training
Effective Security Awareness Training about the Awareness Training: Don’t Just Check the Box
Article

EMV Chip Technology: Impact on Merchants

After the recent POS breaches at EMV-capable retailers Kmart and Buckle, many are left wondering how exactly EMV technology will reduce fraud, who is responsible when breaches do occur, and what other protections still need to be put in place.

Compliance
Read More about the EMV Chip Technology: Impact on Merchants
Article

An Introduction to Defining PCI Scope

Properly defining the scope of your organization’s cardholder data environment (or CDE) is a primary success factor for achieving PCI compliance. Too narrow of a scope can leave cardholder data at risk for exposure, while an overly broad scope will lead to unnecessary costs and efforts.

PCI DSS
Read More about the An Introduction to Defining PCI Scope