PA-DSS vendors now have training options

The last few years have seen a great deal of discussion, arguing, hand-wringing, and posturing within the retail/hospitality community regarding the PCI DSS.

Healthcare organizations tackling PA-DSS should verify apps against the PCI SSC validated list by revision, press vendors for compliance plans, and require ongoing compliance in contracts.

As an organization that performs a large volume of code reviews and penetration tests, NetSPI is frequently asked which type of application assessment is the best option.

Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.

As many organizations that have hired QSAs recently have seen, the Report on Compliance (ROC) has changed quite dramatically for v1.2 of the PCI DSS standard from previous versions.

As a company, we’ve tried to understand which organizations are most likely to mature their information security programs.