Healthcare Solutions and PA-DSS Compliance (with a Deadline in July)

Healthcare executives are concerned with a broad array of regulatory and compliance-related issues.

In this, the second installment in a series discussing common PCI compliance challenges, I address non-compliant payment applications.

Maybe, maybe not. If you are a payment application vendor, are you worried about the changes that have happened with the new release of the Payment Application Data Security Standard (PA-DSS)?

One typical question NetSPI receives from IT managers is "What does PA-DSS entail?" Hopefully, this will give you some answers.

This post is a result of many, many conversations with software companies regarding the PCI Payment Application Data Security Standard (PA-DSS).

PA-DSS 3.0 adds requirements like least privilege for built-in accounts and source code integrity checks, removes one, and modifies others; impact depends on how your application implements security.