PCI compliance news, help and research

PCI compliance News

May 05, 2016 05 May'16
PCI DSS 3.2 multifactor requirement among the version's biggest changes

Details surrounding the updated Payment Card Industry Data Security Standard show that version 3.2 includes new multifactor authentication and encryption requirements. Also in recent GRC news: SEC ...
February 05, 2016 05 Feb'16
Barclays, Credit Suisse to pay $154M for 'dark pool' trading violations

The U.S. Securities and Exchange commission announced last week that global banks Barclays and Credit Suisse would pay a record total of more than $154 million to settle allegations over "dark ...
January 07, 2016 07 Jan'16
Repeat HIPAA violators face minimal ramifications

Despite several HIPAA violations, recent data analysis found U.S. healthcare providers such as CVS and the VA face few punitive actions. Also in recent GRC headlines: Companies have two more years ...
October 02, 2015 02 Oct'15
As EMV adoption lags, industry remains optimistic

News roundup: Despite a low adoption rate going into the liability shift, many in the industry are optimistic about the future of EMV use. Plus: TrueCrypt flaws; AWS crypto keys stolen; women in infosec.

Bring yourself up to speed with our introductory content

PCI DSS (Payment Card Industry Data Security Standard)

The Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted set of policies and procedures intended to optimize the security of credit, debit and cash card transactions and protect cardholders against misuse of their personal ... Continue Reading
regulatory compliance

Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business processes. Continue Reading
PCI DSS merchant levels

Merchant levels are used by the payment card industry (PCI) to determine risk levels and determine the appropriate level of security for their businesses. Specifically, merchant levels determine the amount of assessment and security validation that ... Continue Reading

Weigh the pros and cons of technologies, products and projects you are considering.

Fighting PCI non-compliance could require new frameworks, zero trust

Falling PCI DSS compliance rates could force the PCI Security Standards Council to be more open to other regulatory frameworks and make enterprises aim higher in terms of data security. Could zero trust be part of the solution? Continue Reading
How does a PCI ISA help enterprise security and compliance?

Enterprise compliance can be a burden to manage, which is where a PCI ISA can be helpful. Expert Mike Chapple explains how a PCI Internal Security Assessor helps with security. Continue Reading
Do PCI compliance standards matter when merchants sell off-site?

Merchants that sell at off-site venues need to take extra care to follow PCI compliance standards. Expert Mike Chapple discusses how organizations can do this. Continue Reading

Learn to apply best practices and optimize your operations.

5 PCI DSS best practices to improve compliance

Increased rates of PCI noncompliance are worth examining, as are PCI DSS best practices and tips for small and medium-sized companies. Read more in-depth compliance coverage here. Continue Reading
How PCI DSS compliance milestones can be a GDPR measuring stick

Constantly evolving regulations can cause confusion for security officers, but sometimes, there is process overlap. Here's how achieving compliance with PCI DSS can help meet GDPR mandates. Continue Reading
Data protection requirements start with firm grasp of GRC needs

Corporate data protection requirements are complex, but determining a company's unique GRC needs is an essential first step to information security. Continue Reading

We’ve gathered up expert advice and tips from professionals like you so that the answers you need are always available.

What advice does the PCI Special Interest Group have for compliance?

A new PCI Special Interest Group document gives advice to enterprises on staying PCI DSS compliant after audits. Expert Mike Chapple highlights the key takeaways. Continue Reading
Next generation of threats requires new approach to PCI security

In this Q&A, learn how increasingly sophisticated cyberthreats should influence organizations' information protection and PCI security strategy. Continue Reading
PCI e-commerce compliance guidelines for third-party payment processors

Expert Mike Chapple details the PCI SSC's third-party processor rules and how to outsource card processing and stay PCI DSS compliant. Continue Reading