-
IT compliance: FAQs about IT operations, regulations and standards
This index links to resources about the relationship between IT operations and compliance regulations and standards, including HIPAA, e-discovery, SOX and PCI. FAQs
-
Compliance news quiz: Test your knowledge of FTC, SB 20, PCI and more
What is the FTC up to? What bill did California Gov. Arnold Schwarzenegger recently veto? Learn the answers to these questions and more by taking our latest compliance news quiz. Quiz
-
PCI DSS FAQ: The Payment Card Industry Data Security Standard and IT
This resource provides answers and resources to frequently asked questions regarding the Payment Card Industry Data Security Standard (PCI DSS). FAQ
-
Carrier IQ software creates compliance concerns, regardless of intent
As Carrier IQ defends its data collection processes, some experts say the fact that the information being collected exists at all is a potential privacy and compliance violation. News | 14 Dec 2011
-
PCI DSS 2.0, GRC products top compliance officers' concerns in 2011
In 2011, compliance officers are focusing on virtualization compliance with PCI DSS 2.0 standards, and governance, risk and compliance products. News | 12 Jan 2011
-
Using personally identifiable information is gonna cost you
The public is waking up to the fact that personally identifiable information (PII) has value -- and companies are going to have to pay the price or cease and desist. News | 17 May 2010
-
Getting serious about PCI DSS compliance
IT security is on the hook for PCI DSS compliance but doesn't control the purse strings, according to a survey of qualified security assessors. News | 03 May 2010
-
Data breach notification law SB 20 strikes right balance: Simitian
California data breach notification law sponsor State Sen. Joe Simitian discusses what his SB 20 amendment means for privacy and whether state laws should give way to a federal law. Article | 28 Sep 2009
-
Implementing compliance with the Massachusetts data protection act
Expert Richard Mackey explains how to implement compliance with the Massachusetts data protection act. Article | 20 Jul 2009
-
Mass. officials, compliance officers debate data protection law
State officials and compliance officers explore what compliance with the Massachusetts data protection law will mean. Article | 17 Jul 2009
-
Scale aside, cloud computing compliance still worries IT managers
The question of whether an enterprise can leverage economies of scale with the cloud and still be able to address cloud computing compliance remains serious to IT practitioners. Article | 25 Jun 2009
-
Is all the PCI DSS compliance whining and complaining justified?
Retailers are revolting against the PCI Council, calling for reform of PCI DSS compliance regulations, but security is simply part of the cost of doing business in today's world. Column | 18 Jun 2009
-
Startup helps turn carbon footprint management into cost savings
Software that helps optimize an organization's carbon footprint, water usage, energy usage and waste management can improve operations and save an enterprise real money. Article | 01 Jun 2009
- See More: News on PCI compliance
-
Log management and compliance: What's the real story?
As more companies deploy security information and event management tools, as well as log management solutions, it's time to take a look at the regulations that apply to logging. Tip
-
Defending enterprise security in the post-Google Aurora era
The Google Aurora cyberattacks should be a wake-up call for enterprise security officers to go beyond regulatory compliance standards. Tip
-
Priorities for your sound regulatory compliance management policy
A sound regulatory compliance management strategy must have its priorities in order, including document management, security standards and leadership. Tip
-
D.C. CTO sees compliance, cost savings benefits to cloud computing
The CTO for the District of Columbia is staying compliant while finding cost savings and ROI through his cloud computing platform. Tip
-
Does using ISO 27000 to comply with PCI DSS make for better security?
PCI DSS is under fire for not providing enough security in the process of securing credit card data. Using ISO 27000 to complement PCI may provide better compliance and security. Tip
-
Security and compliance can go together, when done in the right order
You can have security and still not be in compliance -- but you can't have true compliance without real security. How to avoid getting caught in the security and compliance trap. Tip
-
Nonprofits are working to maintain donor trust with PCI compliance
For nonprofits that process electronic payments, achieving PCI compliance is a matter of both trust and security. Tip
-
PCI DSS compliance fails to raise the bar on financial fraud
Experts say PCI DSS compliance does not prevent sophisticated online financial fraud schemes. Security and compliance managers need to go beyond the standard. Tip
-
PCI DSS compliance requires better management of vendor risk
PCI DSS Requirement 12.8 requires organizations to measure and mitigate vendor risk. Tip
-
PCI DSS compliance requires new vendor management strategy
Requirement 12.8 requires a better vendor management strategy for PCI DSS compliance. Tip
- See More: Tips on PCI compliance
-
IFRS (International Financial Reporting Standards)
IFRS (International Financial Reporting Standards) is a set of accounting standards developed by an independent, not-for profit organization called the International Accounting Standards Board (IASB). Word
-
Carrier IQ software creates compliance concerns, regardless of intent
As Carrier IQ defends its data collection processes, some experts say the fact that the information being collected exists at all is a potential privacy and compliance violation. News
-
PCI DSS 2.0, GRC products top compliance officers' concerns in 2011
In 2011, compliance officers are focusing on virtualization compliance with PCI DSS 2.0 standards, and governance, risk and compliance products. News
-
IT compliance: FAQs about IT operations, regulations and standards
This index links to resources about the relationship between IT operations and compliance regulations and standards, including HIPAA, e-discovery, SOX and PCI. FAQs
-
Log management and compliance: What's the real story?
As more companies deploy security information and event management tools, as well as log management solutions, it's time to take a look at the regulations that apply to logging. Tip
-
Using personally identifiable information is gonna cost you
The public is waking up to the fact that personally identifiable information (PII) has value -- and companies are going to have to pay the price or cease and desist. News
-
Getting serious about PCI DSS compliance
IT security is on the hook for PCI DSS compliance but doesn't control the purse strings, according to a survey of qualified security assessors. News
-
Defending enterprise security in the post-Google Aurora era
The Google Aurora cyberattacks should be a wake-up call for enterprise security officers to go beyond regulatory compliance standards. Tip
-
IFRS (International Financial Reporting Standards)
IFRS (International Financial Reporting Standards) is a set of accounting standards developed by an independent, not-for profit organization called the International Accounting Standards Board (IASB). Word
-
Compliance news quiz: Test your knowledge of FTC, SB 20, PCI and more
What is the FTC up to? What bill did California Gov. Arnold Schwarzenegger recently veto? Learn the answers to these questions and more by taking our latest compliance news quiz. Quiz
-
Priorities for your sound regulatory compliance management policy
A sound regulatory compliance management strategy must have its priorities in order, including document management, security standards and leadership. Tip
- See More: All on PCI compliance
About PCI compliance
Guidelines set by the Payment Card Industry (PCI) may not be mandated by the government, but organizations are still scrambling to comply with the Payment Card Industry Data Security Standard (PCI DSS). Learn more about PCI compliance and find advice for financial services firms following PCI DSS with the resources in this section.