Virtual Terminals and PCI 2.0 – Introducing the SAQ C-VT

In continuing with my series addressing common compliance hurdles relating to Payment Card Industry (PCI) requirements, I would like to turn to the topic of data retention.

Since the role of the Chief Information Security Officer (CISO) and how he or she reports has a major impact on security and risk, I think it’s interesting to look at how different organizations have structured the position. With that said, there is very little consistency other than a correlation with the industry vertical’s understanding of IT risk.

At the PCI Community Meeting last month in Las Vegas, one thing was abundantly clear – merchants and service providers need help.

As the PCI Community Meeting is set to start tomorrow, I have been thinking about the current state of the retail marketplace and what that means for NetSPI's focus--security and compliance.

The last few years have seen a great deal of discussion, arguing, hand-wringing, and posturing within the retail/hospitality community regarding the PCI DSS.

Bishop Fox explains its approach to PCI DSS v4.0.1 internal penetration testing: scoping cardholder data flows, testing all segmentation controls, and delivering QSA-ready reports.