category:

Vulnerability Scanning

Webinar

Penetration Testing vs. Vulnerability Assessments

Think you know the difference between pen testing and vulnerability assessments? This presentation helps to clarify these and other terms used in the industry, and the benefits that come from knowing that distinction when it comes to securing your network.

Penetration Testing
Explore the Difference: Penetration Testing vs. Vulnerability Assessments about the Penetration Testing vs. Vulnerability Assessments
Article

5 Mistakes That Will Break Your PCI Compliance Program

Your organization successfully completed a compliant SAQ and your acquiring bank has approved your annual Attestation of Compliance. Now what?

PCI DSS
Read More about the 5 Mistakes That Will Break Your PCI Compliance Program
Article

A Well Run PCI Program: How Do They Do It?

How are organizations successfully monitoring and maintaining ongoing compliance efforts? Regardless of their size, it requires a daily, coordinated focus and must be actively maintained.

PCI DSS
Read More about the A Well Run PCI Program: How Do They Do It?
Article

PCI Acronym Reference Guide

To help you understand the lingo behind compliance, here are some of the most common terms you might hear in reference to PCI and what exactly they are referring to.

PCI DSS
Read More about the PCI Acronym Reference Guide
Article

Vulnerability Management – Equifax’s Avoidable Nightmare

In the aftermath of one of the largest and most highly publicized data breaches, Equifax confirmed that attackers were able to gain access to their systems through a known web-application vulnerability that had a patch available at least 2 months prior.

Cybersecurity
Web-application Vulnerability about the Vulnerability Management – Equifax’s Avoidable Nightmare
Article

An Introduction to Defining PCI Scope

Properly defining the scope of your organization’s cardholder data environment (or CDE) is a primary success factor for achieving PCI compliance. Too narrow of a scope can leave cardholder data at risk for exposure, while an overly broad scope will lead to unnecessary costs and efforts.

PCI DSS
Read More about the An Introduction to Defining PCI Scope
Article

Evaluating Third-Party Service Provider PCI Compliance

Any third-party service provider (TPSP) that stores, processes, or transmits cardholder data on behalf of your organization or could impact the security of your customers’ cardholder data, must meet the requirements of the PCI DSS.

PCI DSS
Managing Third-Party Compliance about the Evaluating Third-Party Service Provider PCI Compliance
Article

The Ins and Outs of Penetration Testing

Understanding exactly what happens during a penetration test, the type of test your organization needs (wait…there are different types?), what is involved in preparing for a pen test, and what resources may be required for follow-up remediation efforts can be difficult.

Penetration Testing
Read More about the The Ins and Outs of Penetration Testing
Article

Your Bank Has Requested the College’s Attestation of Compliance…Now What?

Many colleges and universities have recently received letters from their acquiring banks requesting an Attestation of Compliance (AOC) to verify they are meeting their PCI requirements. Failure to comply can result in significant fines, or you may even forfeit your ability to accept credit cards.

PCI DSS
Read More about the Your Bank Has Requested the College’s Attestation of Compliance…Now What?