Clarifying the new PCI DSS 3.2 Requirements for Service ProvidersThe process of securing cardholder data is (more…)Cindy Kaplan2024-12-05T03:22:27+00:00Categories: Governance & Risk Management, PCI Compliance, Third-Party Risk & Vendor Risk Management|Tags: payment processing, PCI, PCI Compliance, pci dss requirements, Service providers|
PCI and Third Party Security Assurance: The PCI Council’s Guidance Summarized (more…)Cindy Kaplan2024-11-20T16:31:56+00:00Categories: PCI Compliance, Third-Party Risk & Vendor Risk Management|Tags: PCI, PCI Compliance, pci dss requirements, PCI DSS v4.0, QSA, third party, TSPS|
Guide to System Hardening | PCI DSS ComplianceCindy Kaplan2024-12-05T03:31:21+00:00Categories: PCI Compliance|Tags: Compliance, DSS, Microsoft windows server 2008, PCI, PCI Compliance, PCI DSS, pci dss requirements, PCI DSS v4.0, system hardening|
Reasonable and Appropriate Data SecurityReasonable and Appropriate Data Security – An interesting case that (more…)Cindy Kaplan2024-07-02T20:29:55+00:00Categories: Duty of Care Risk Assessment (DoCRA), Governance & Risk Management, PCI Compliance, Reasonable Security | Reasonable Risk|Tags: data, FTC, pci dss requirements, Reasonable, security|
PCI Security Standards Council Releases Point-To-Point Encryption (P2PE) Resources (more…)Cindy Kaplan2024-07-02T20:29:55+00:00Categories: PCI Compliance|Tags: Payment Card Industry Data Security Standard, PCI, PCI Compliance, pci dss requirements|