PCI compliance
New & Notable
Action Required: The California Privacy Laws Are Here
It’s not just the EU that’s putting customer data protection legislation into place – the new California privacy laws are now effective as of January 2020. Here’s what your company should know about the new data protection laws and their key differences from the EU’s GDPR before these laws get stricter and stricter.
PCI compliance News
-
May 05, 2016
05
May'16
PCI DSS 3.2 multifactor requirement among the version's biggest changes
Details surrounding the updated Payment Card Industry Data Security Standard show that version 3.2 includes new multifactor authentication and encryption requirements. Also in recent GRC news: SEC ...
-
February 05, 2016
05
Feb'16
Barclays, Credit Suisse to pay $154M for 'dark pool' trading violations
The U.S. Securities and Exchange commission announced last week that global banks Barclays and Credit Suisse would pay a record total of more than $154 million to settle allegations over "dark ...
-
January 07, 2016
07
Jan'16
Repeat HIPAA violators face minimal ramifications
Despite several HIPAA violations, recent data analysis found U.S. healthcare providers such as CVS and the VA face few punitive actions. Also in recent GRC headlines: Companies have two more years ...
-
October 02, 2015
02
Oct'15
As EMV adoption lags, industry remains optimistic
News roundup: Despite a low adoption rate going into the liability shift, many in the industry are optimistic about the future of EMV use. Plus: TrueCrypt flaws; AWS crypto keys stolen; women in infosec.
PCI compliance Get Started
Bring yourself up to speed with our introductory content
-
PCI DSS merchant levels
Merchant levels are used by the payment card industry (PCI) to determine risk levels and determine the appropriate level of security for their businesses. Specifically, merchant levels determine the amount of assessment and security validation that ... Continue Reading
-
PCI DSS compliance (Payment Card Industry Data Security Standard compliance)
Payment Card Industry Data Security Standard (PCI DSS) compliance is adherence to the set of policies and procedures developed to protect credit, debit and cash card transactions and prevent the misuse of cardholders' personal information. Continue Reading
-
FTC (Federal Trade Commission)
The FTC (Federal Trade Commission) is a United States federal regulatory agency designed to monitor and prevent anticompetitive, deceptive or unfair business practices. Continue Reading
Evaluate PCI compliance Vendors & Products
Weigh the pros and cons of technologies, products and projects you are considering.
-
How does a PCI ISA help enterprise security and compliance?
Enterprise compliance can be a burden to manage, which is where a PCI ISA can be helpful. Expert Mike Chapple explains how a PCI Internal Security Assessor helps with security. Continue Reading
-
Do PCI compliance standards matter when merchants sell off-site?
Merchants that sell at off-site venues need to take extra care to follow PCI compliance standards. Expert Mike Chapple discusses how organizations can do this. Continue Reading
-
Why is the FTC interested in PCI assessments?
The FTC's order for PCI DSS compliance assessments is odd since PCI isn't a government regulation. Expert Mike Chapple explains the motivation driving this order. Continue Reading
Manage PCI compliance
Learn to apply best practices and optimize your operations.
-
How PCI DSS compliance milestones can be a GDPR measuring stick
Constantly evolving regulations can cause confusion for security officers, but sometimes, there is process overlap. Here's how achieving compliance with PCI DSS can help meet GDPR mandates. Continue Reading
-
Data protection requirements start with firm grasp of GRC needs
Corporate data protection requirements are complex, but determining a company's unique GRC needs is an essential first step to information security. Continue Reading
-
What advice does the PCI Special Interest Group have for compliance?
A new PCI Special Interest Group document gives advice to enterprises on staying PCI DSS compliant after audits. Expert Mike Chapple highlights the key takeaways. Continue Reading
Problem Solve PCI compliance Issues
We’ve gathered up expert advice and tips from professionals like you so that the answers you need are always available.
-
Next generation of threats requires new approach to PCI security
In this Q&A, learn how increasingly sophisticated cyberthreats should influence organizations' information protection and PCI security strategy. Continue Reading
-
Will consumer protection measures evolve after the Target data breach?
The Target data breach has led legislators to reexamine retailers' data security processes. Will it lead to new consumer protection measures? Continue Reading
-
The mobile device influence on regulatory compliance mandates
In this tip, learn how the proliferation of mobile devices in the workplace forces companies to reexamine their regulatory compliance processes. Continue Reading