Things not to overlook in the new PCI DSS 3.0

Some of the team from NetSPI spent the week in sunny Orlando at the 2010 PCI North American Community Meeting.

As an information security professional, my experience within the payment card security industry has taught me that credit card fraud is not just an information security or information technology issue, but increasingly also a financial one.

In late March Thales released an interesting report on the state of PCI – “PCI DSS Trends 2010: QSA Insights Report.”

Since the role of the Chief Information Security Officer (CISO) and how he or she reports has a major impact on security and risk, I think it’s interesting to look at how different organizations have structured the position. With that said, there is very little consistency other than a correlation with the industry vertical’s understanding of IT risk.

At the PCI Community Meeting last month in Las Vegas, one thing was abundantly clear – merchants and service providers need help.

As the PCI Community Meeting is set to start tomorrow, I have been thinking about the current state of the retail marketplace and what that means for NetSPI's focus--security and compliance.