Risk, Security and Subjectivity Within PCI

At the PCI Community Meeting last month in Las Vegas, one thing was abundantly clear – merchants and service providers need help.

Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.

As many organizations that have hired QSAs recently have seen, the Report on Compliance (ROC) has changed quite dramatically for v1.2 of the PCI DSS standard from previous versions.

As a company, we’ve tried to understand which organizations are most likely to mature their information security programs.

Preparing for an audit can be one of the best ways to fund and improve your security program, but this “stimulus package” for your compliance effort typically dwindles once an organization completes or passes an audit.

From June 30, 2012, MasterCard Level 2 merchants self-assessing must use ISA-trained staff or hire a QSA. The article outlines the benefits of keeping an Internal Security Assessor on staff.