type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

EMV Chip Technology: Impact on Merchants

After the recent POS breaches at EMV-capable retailers Kmart and Buckle, many are left wondering how exactly EMV technology will reduce fraud, who is responsible when breaches do occur, and what other protections still need to be put in place.

Compliance
Read More about the EMV Chip Technology: Impact on Merchants
Article

An Introduction to Defining PCI Scope

Properly defining the scope of your organization’s cardholder data environment (or CDE) is a primary success factor for achieving PCI compliance. Too narrow of a scope can leave cardholder data at risk for exposure, while an overly broad scope will lead to unnecessary costs and efforts.

PCI DSS
Read More about the An Introduction to Defining PCI Scope
Article

Mobile Payments: Security vs. Convenience

While making the payment process as simple for the end user is almost always the end goal, you also need to ensure you are not putting your consumer’s data at risk by doing so.

Payments & Treasury Solutions
Read More about the Mobile Payments: Security vs. Convenience
Article

Procurement: An Overlooked Gatekeeper for PCI Compliance

They should know that anytime they receive a contract that mentions payment card information in any way, they need to involve the PCI Team, so you can review what is being proposed and provide the appropriate contract language regarding PCI compliance responsibilities, necessary documentation, etc.

PCI DSS
Read More about the Procurement: An Overlooked Gatekeeper for PCI Compliance
Article

Target to Pay $18.5M in Settlement for 2013 Breach:

Target was certified as PCI compliant in September of 2013, shortly before the breach – so how were they hacked? Unfortunately, as we have seen in a number of recent breaches, compliance is a snapshot in time. Unless the security requirements are maintained, gaps may arise in the infrastructure.

PCI DSS
Read More about the Target to Pay $18.5M in Settlement for 2013 Breach:
Article

Understanding PCI DSS Logging Requirements

From a security perspective, logs should be utilized as more of a prevention tool and configured to alert staff of potential suspicious activities to be investigated before too much damage is done.

PCI DSS
Read More about the Understanding PCI DSS Logging Requirements
Article

Evaluating Third-Party Service Provider PCI Compliance

Any third-party service provider (TPSP) that stores, processes, or transmits cardholder data on behalf of your organization or could impact the security of your customers’ cardholder data, must meet the requirements of the PCI DSS.

PCI DSS
Managing Third-Party Compliance about the Evaluating Third-Party Service Provider PCI Compliance
Article

The Ins and Outs of Penetration Testing

Understanding exactly what happens during a penetration test, the type of test your organization needs (wait…there are different types?), what is involved in preparing for a pen test, and what resources may be required for follow-up remediation efforts can be difficult.

Penetration Testing
Read More about the The Ins and Outs of Penetration Testing
Article

Why Merchants Should Complete Their Own PCI SAQs

Who is responsible for completing SAQs? Does the PCI Team need to go through for each and every MID, and complete a separate form? After all, the PCI Team members are the ones that know what the questions are actually asking, right?

PCI DSS
Read More about the Why Merchants Should Complete Their Own PCI SAQs