Questions on PA-DSS from Software Companies and Straight Answers

Maybe, maybe not. If you are a payment application vendor, are you worried about the changes that have happened with the new release of the Payment Application Data Security Standard (PA-DSS)?

One typical question NetSPI receives from IT managers is "What does PA-DSS entail?" Hopefully, this will give you some answers.

Healthcare executives are concerned with a broad array of regulatory and compliance-related issues.

In this, the second installment in a series discussing common PCI compliance challenges, I address non-compliant payment applications.

In a post that I wrote earlier, "The Far-Reaching Impact of the PCI DSS," I mentioned the influence of the PCI DSS on industries other than retail and hospitality.

PA-DSS 3.0 adds requirements like least privilege for built-in accounts and source code integrity checks, removes one, and modifies others; impact depends on how your application implements security.