Blog

PCI DSS requirement 2.2.1.a says “describe how system configurations verified that only one primary function per server is implemented.”

At a client site recently I was watching a customer service rep as she performed her duties during a PCI DSS interview, and noticed that when ...

PCI DSS Requirement 12.8 dictates that any organization involved in payment card processing—including merchants, processors, acquirers, issuers, ...

Payment cards have been around a long time, and nefarious schemes to take advantage of them have been around almost as long. Since most people ...

The GDPR mantra of security and privacy “by design and by default” reminds us that in every respect of a new product program security and ...

The Payment Card Industry Data Security Standard (PCI DSS) is required by contract for those handling cardholder data, whether you are a startup ...

Last month I wrote about the new PCI DSS standard version 3.2.1 and how nothing of significance had changed. Though that remains true, the ...

In May 2018, the PCI Security Standards Council, the authors of the PCI DSS standard, issued a new version of that standard - version 3.2.1. ...

A growing trend in the world of Cyber Security is companies outsourcing of some or all of their Information Security teams. This can be just a ...

I constantly hear that recent computer science graduates have not even been introduced to the notion of secure coding. They may have been taught ...