Posts Tagged Conventional PCI
PCI Security Standards Council announces winners of Special Interest Group elections
Posted by brianfpennington in PCI DSS Compliance on 15/11/2011
The PCI PCI SSC today announced the results of the PCI Council election for Special Interest Groups (SIGS). Special Interest Groups (SIG) leverage the expertise of more than 600 PCI SSC Participating Organizations and provide a vehicle for incorporating their ideas and input into the work of the Council. Almost 500 votes were cast by merchants, financial institutions, […]
Only 21% of merchants were compliant and other startling PCI DSS facts from the coal face
Posted by brianfpennington in PCI DSS Compliance on 11/11/2011
Image via CrunchBase Verizon have recently launched their 2011 Payment Industry Compliance Report, which draws on their experiences as a Qualified Security Advisor (QSA) company, and their previous annual reports. Below are exerts from their report:- Unchanged from last year:- 21 % of organizations were fully compliant at the time of their Initial Report on […]
PCI SSC updates PTS program for Encryption and Mobile
Posted by brianfpennington in PCI DSS Compliance on 15/10/2011
The PCI Security Standards Council have provided and update to the PIN Transaction Security Program for secure point-to-point encryption (P2PE) and mobile payment acceptance. PTS 3.1 adds two new approval classes that facilitate the deployment of P2PE technology in payment card security efforts, building on the Secure Reading and Exchange of Data (SRED) module previously introduced in version 3.0 […]
Merchants are complacent about PCI DSS, report reveals.
Posted by brianfpennington in PCI DSS Compliance on 12/10/2011
Image via Wikipedia Verizon have launched their 2011 Payment Industry Compliance Report which draws on their experiences as a QSA company and previous annual reports. Extracts from the report are below. Unchanged from last year, only 21 % of organizations were fully compliant at the time of their Initial Report on Compliance (IROC). Verizon commented with […]
Good news for Merchants as the PCI Security Standards Council releases Tokenization guidance
Posted by brianfpennington in PCI DSS Compliance on 17/08/2011
On August the 12th The Payment Card Industry Security Standards Council (PCI SSC) published guidelines to help Merchants and credit card processors take advantage of “Tokenization“. The PCI SSC definition of Tokenization: “Tokenization technology replaces a Primary Account Number (PAN) with a surrogate value called a “token”. Specific to PCI DSS, this involves substituting sensitive PAN […]
Call Centre Security and PCI Compliance
Posted by brianfpennington in PCI DSS Compliance on 12/04/2011
Credit Card data is the Crown Jewels for hackers and the financial lifeblood of many companies. An Account Data Compromise, also known as a breach can lead to bad press and a bad reputation, you only need to Google Play.com or Lush to see the impact. With the 18th March 2011 launch of the PCI Councils […]
PCI SSC Board of Advisors 2011 elections are now open
Posted by brianfpennington in PCI DSS Compliance on 09/03/2011
The PCI SSC Board of Advisors elections for 2011 to 2013 are now open. All Participating PCI SSC organisations can vote. Votes close 08 April 2011. The votes will decide the composition of the Board of Advisors for the next 2 years. A complete list of the candidates is below: Financial Institution – 3 votes Australia […]
Brian Pennington
-
