type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

Switching Merchant Services Banks

Changing your merchant services bank can be an overwhelming process for campus-based organizations due to the significant number of merchants and locations, and the diverse range of payment processes that have been implemented. Here are several key factors that should be considered as part of your decision.

Payments & Treasury Solutions
Read More about the Switching Merchant Services Banks
Article

Balancing 3rd Party PCI Compliance

The use of third-party vendors within your organization alters the scope of your PCI DSS Compliance. Determining your responsibilities within that scope is the only way to achieve and maintain compliance.

PCI DSS
Third-Party Management about the Balancing 3rd Party PCI Compliance
Article

PCI DSS: VoIP Guidance

If you have merchants accepting cardholder data over a VoIP telephone, this can unfortunately expand your organization’s PCI DSS scope. Learn what impact this will have on your PCI compliance program.

PCI DSS
Read More about the PCI DSS: VoIP Guidance
Article

Third-Party Service Provider AoCs

Requirement 12 of the PCI DSS can be found in all of the SAQs and focuses primarily on the policies and procedures each merchant should have in place, as well as the requirements for monitoring any third-party service providers that may be involved in the payment card process.

PCI DSS
Read More about the Third-Party Service Provider AoCs
Article

Data Privacy Day

Data Privacy Day is an opportunity to reflect on how we can and should protect ourselves in the modern cyber world where we increasingly work, play, communicate and socialize.

Data Privacy
Read More about the Data Privacy Day
Article

Defining an IT Security Baseline

With your organization's information security environment constantly changing, the best way to detect a risk to your network is to establish an information security baseline using a consistent cybersecurity framework.

Cybersecurity
Read More about the Defining an IT Security Baseline
Article

NIST SP 800-171 Framework Series: Personnel Security

Part 9 of CampusGuard’s series covers each of the critical controls from NIST SP 800-171 rev.2 When performing IT security assessments, part of the engagement planning process includes providing the security committee with a list of all suggested departments and individuals that should be included in the assessment interviews.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Personnel Security
Article

VoIP Network on Campus: Impact to Your Payment Card Terminals

Traditional analog phone lines are being replaced across campus by Voice over Internet Protocol telephones, in which all phone services are provided by a network connection. This transition can have an effect on your PCI compliance program in multiple ways...

PCI DSS
Read More about the VoIP Network on Campus: Impact to Your Payment Card Terminals
Article

Web Application Pen Testing

A web application penetration test is a simulated attack on web-based software applications. This testing can identify weaknesses within the environment or be used to demonstrate the resilience of an application to attack.

Penetration Testing
Read More about the Web Application Pen Testing