PCI PA-DSS in Healthcare – Part 1

In a post that I wrote earlier, "The Far-Reaching Impact of the PCI DSS," I mentioned the influence of the PCI DSS on industries other than retail and hospitality.

Maybe, maybe not. If you are a payment application vendor, are you worried about the changes that have happened with the new release of the Payment Application Data Security Standard (PA-DSS)?

One typical question NetSPI receives from IT managers is "What does PA-DSS entail?" Hopefully, this will give you some answers.

In this, the second installment in a series discussing common PCI compliance challenges, I address non-compliant payment applications.

This post is a result of many, many conversations with software companies regarding the PCI Payment Application Data Security Standard (PA-DSS).

PA-DSS 3.0 adds requirements like least privilege for built-in accounts and source code integrity checks, removes one, and modifies others; impact depends on how your application implements security.