type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

Understanding PCI DSS Logging Requirements

From a security perspective, logs should be utilized as more of a prevention tool and configured to alert staff of potential suspicious activities to be investigated before too much damage is done.

PCI DSS
Read More about the Understanding PCI DSS Logging Requirements
Article

Evaluating Third-Party Service Provider PCI Compliance

Any third-party service provider (TPSP) that stores, processes, or transmits cardholder data on behalf of your organization or could impact the security of your customers’ cardholder data, must meet the requirements of the PCI DSS.

PCI DSS
Managing Third-Party Compliance about the Evaluating Third-Party Service Provider PCI Compliance
Article

The Ins and Outs of Penetration Testing

Understanding exactly what happens during a penetration test, the type of test your organization needs (wait…there are different types?), what is involved in preparing for a pen test, and what resources may be required for follow-up remediation efforts can be difficult.

Penetration Testing
Read More about the The Ins and Outs of Penetration Testing
Article

Why Merchants Should Complete Their Own PCI SAQs

Who is responsible for completing SAQs? Does the PCI Team need to go through for each and every MID, and complete a separate form? After all, the PCI Team members are the ones that know what the questions are actually asking, right?

PCI DSS
Read More about the Why Merchants Should Complete Their Own PCI SAQs
Article

A Business Case for Multi-Factor Authentication

Is your organization in the process of implementing multi-factor authentication on your systems? Keep reading for some of our best tips and things to consider if you choose to implement multi-factor authentication.

Cybersecurity
Read More about the A Business Case for Multi-Factor Authentication
Article

Call Centers: A PCI Perspective

Call centers that handle payment card information have a responsibility to protect their customers from data compromise and fraud. Some university call centers will fall into your institution's PCI DSS scope and thus will need to be compliant.

PCI DSS
Read More about the Call Centers: A PCI Perspective
Article

Data Breach Notification Laws: Use Them to Your Advantage

In your next budget presentation, it may be helpful to include some of the legal consequences that you can face if appropriate security controls aren’t put in place.

Compliance
Read More about the Data Breach Notification Laws: Use Them to Your Advantage
Article

Standardizing Payment Processes on Campus - What it means and how to do it

With multiple merchants, solutions, and devices spread across multiple locations, each can implement a payment process that best fit their needs or is the most affordable. Without specific guidance and proper follow up, it is very unlikely that you will have any consistency.

Payments & Treasury Solutions
Read More about the Standardizing Payment Processes on Campus - What it means and how to do it
Article

University Hacked by Its Own Vending Machines

The recent sneak peek publication of the 2017 “Verizon Data Breach Digest” highlighted how hackers had used a University’s own vending machines and other internet-enabled devices to hack their network and almost brought the campus to a halt.

Cybersecurity
Read More about the University Hacked by Its Own Vending Machines