New MasterCard Level 2 Validation Requirements Effective June 30, 2012

As many organizations that have hired QSAs recently have seen, the Report on Compliance (ROC) has changed quite dramatically for v1.2 of the PCI DSS standard from previous versions.

PCI SSC has released the ROC Reporting Instructions—the previously secret audit scorecard used by QSAs—to the public, so organizations can assess controls against the criteria auditors apply.

In late March Thales released an interesting report on the state of PCI – “PCI DSS Trends 2010: QSA Insights Report.”

At the PCI Community Meeting last month in Las Vegas, one thing was abundantly clear – merchants and service providers need help.

Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.

The last few years have seen a great deal of discussion, arguing, hand-wringing, and posturing within the retail/hospitality community regarding the PCI DSS.