Category Archives: PCI DSS

EMV: Payment Security Endzone?

Posted on September 29, 2012 by

As I’m buckling down for another fun-filled day of college football, I’m drawn to compare the GameDay set to some of the panels I’ve recently seen.  As Kirk, Lee, and the gang try to determine the best strategies for each … Continue reading →

Posted in Industry News, PCI DSS | Tagged , , , , , , , | Leave a comment

“123456, password, welcome” – Yahoo Password Posted Online

Posted on July 12, 2012 by

A story today on MSNBC says that Yahoo Voices was compromised and 450,000 usernames/password posted online.  Not surprisingly, the passwords were not hashed or otherwise protected using encryption.  While the posting of passwords is nothing new what is interesting is … Continue reading →

Posted in News, PCI DSS, Risk & Risk Management | Tagged , , , , , , , , | Leave a comment

“Are You Eating a Rotten Apple?” – Personal Data May have Been Exposed in Global Payments Breach

Posted on July 9, 2012 by

Let me preface this post by saying this is not intended to take shots at either Global Payments or the PCI DSS.  Rather, this post is intended to generate discussion and discourse on the topic of compliance and risk management. … Continue reading →

Posted in cybersecurity, Data Breach, Industry News, InfoSec & Privacy, PCI DSS, Risk & Risk Management | Tagged , , , , , , , , | Leave a comment

“Let’s Talk Data Security” – Heather Mark in July 2012 Greensheet & TransactionWorld

Posted on July 9, 2012 by

Heather Mark is interviewed in the July 2012 issue of Greensheet in the article titled: “Expert Advice on Security Defense and Planning”.    The article discusses strategies for preventing and dealing with data breaches with the payment card industry.    Additionally, … Continue reading →

Posted in cybersecurity, Data Breach, Laws and Leglslation, News, PCI DSS | Tagged , , , , , , , | Leave a comment

Collective Security & the Payment System

Posted on June 11, 2012 by

I recently attended an event focused on payment security and fraud prevention.  It was an outstanding event and the presentations and panels were incredibly valuable – not something that I frequently say about payment security events these days.  However, one … Continue reading →

Posted in Laws and Leglslation, PCI DSS, Politics | Tagged , , , , , , , , | 1 Comment