The Far-Reaching Impact of the PCI DSS

Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.

As a company, we’ve tried to understand which organizations are most likely to mature their information security programs.

Compliance frameworks like HIPAA, PCI-DSS, and NERC-CIP prove you are compliant, not secure; mature programs shift from checking boxes to risk-based, continuous monitoring of internet-facing assets.

PA-DSS payment application vendors can now satisfy requirement 5.2.a secure coding training through PCI Council-endorsed SANS courses, from OWASP Top 10 basics to language-specific tracks.

Healthcare organizations tackling PA-DSS should verify apps against the PCI SSC validated list by revision, press vendors for compliance plans, and require ongoing compliance in contracts.

As an organization that performs a large volume of code reviews and penetration tests, NetSPI is frequently asked which type of application assessment is the best option.