type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

Information Disposal: Securely Deleting Data

Once stored data is no longer needed, the PCI DSS includes specific requirements for disposing of cardholder data whether stored on paper or electronic media.

PCI DSS
Read More about the Information Disposal: Securely Deleting Data
Article

PCI DSS Version 3.2 – Are You Meeting All New Requirements?

Version 3.2 of the PCI DSS was released in April 2016 with several updates intended to better protect organizations from data breaches and help clarify some previous points of confusion within the standard.

PCI DSS
Read More about the PCI DSS Version 3.2 – Are You Meeting All New Requirements?
Article

PCI Acronym Reference Guide

To help you understand the lingo behind compliance, here are some of the most common terms you might hear in reference to PCI and what exactly they are referring to.

PCI DSS
Read More about the PCI Acronym Reference Guide
Article

Life After P2PE

You have made the decision to deploy a PCI-listed Point-to-Point Encryption (P2PE) solution on campus. No more worrying about PCI compliance, right? Wrong.

PCI DSS
Read More about the Life After P2PE
Article

Passwords: Simplifying the Rules

Login IDs, passwords, and the security controls surrounding them are very important in preventing unauthorized access to systems and information. How can you ensure your employees are utilizing strong passwords?

Cybersecurity
Read More about the Passwords: Simplifying the Rules
Article

Incorporating PCI into Your InfoSec Program

Once PCI DSS compliance is part of your business-as-usual, concerns about cardholder data security are reduced. But what about personal health information, or personally identifiable information like social security numbers, birth dates, addresses, etc.?

Compliance
PCI InfoSec Components about the Incorporating PCI into Your InfoSec Program
Article

Vulnerability Management – Equifax’s Avoidable Nightmare

In the aftermath of one of the largest and most highly publicized data breaches, Equifax confirmed that attackers were able to gain access to their systems through a known web-application vulnerability that had a patch available at least 2 months prior.

Cybersecurity
Web-application Vulnerability about the Vulnerability Management – Equifax’s Avoidable Nightmare
Article

Identify Theft – Protecting Your Personal Information

Identity theft is a daily concern for most of us. Did you know that every two seconds another person in the United States falls victim to identity fraud?

Red Flags Rule
Read More about the Identify Theft – Protecting Your Personal Information
Article

Incident Response: Does Your Plan Pass the Test?

It is important that your plan includes specific steps in the event of a cardholder data breach. Creating an initial draft of your plan can be a little overwhelming, but breaking it up into smaller components can help you manage the effort and ensure you are covering all of your bases.

Incident Response
Does Your Plan Pass the Test? about the Incident Response: Does Your Plan Pass the Test?