Brand Reciprocity Revoked by Visa and MasterCard: What It Means for Merchants

In this, the second installment in a series discussing common PCI compliance challenges, I address non-compliant payment applications.

Since the role of the Chief Information Security Officer (CISO) and how he or she reports has a major impact on security and risk, I think it’s interesting to look at how different organizations have structured the position. With that said, there is very little consistency other than a correlation with the industry vertical’s understanding of IT risk.

In a post that I wrote earlier, "The Far-Reaching Impact of the PCI DSS," I mentioned the influence of the PCI DSS on industries other than retail and hospitality.

At the PCI Community Meeting last month in Las Vegas, one thing was abundantly clear – merchants and service providers need help.

As the PCI Community Meeting is set to start tomorrow, I have been thinking about the current state of the retail marketplace and what that means for NetSPI's focus--security and compliance.

From June 30, 2012, MasterCard Level 2 merchants self-assessing must use ISA-trained staff or hire a QSA. The article outlines the benefits of keeping an Internal Security Assessor on staff.