PCI SSC has clarified new requirements 2.x and 8.x included in the SAQ A v3.2. According to the FAQ 1439 these new requirements apply to all redirection servers in Ecommerce and MOTO payment channels. “E-commerce merchants that redirect customers from their website to… Continue Reading
A revised version of PCI DSS v3.2 has been published. Three articles published by PCI SSC, which you may find useful: Preparing for PCI DSS 3.2: Summary of Changes PCI DSS 3.2: What’s New? PCI DSS 3.2: What’s New with SAQs?… Continue Reading
Download the Bulletin. Key points and deadlines: All processing and third party entities ? including Acquirers, Processors, Gateways and Service Providers must provide a TLS 1.1 or greater service offering by June 2016 Consistent with the existing language in the DSS… Continue Reading
PCI Security Standards Council Chief Technology Officer Troy Leach talks about what to expect from PCI SSC in 2016. Click HERE.
Download: ISACA Member $35 | Non-Member $60 The guide provides a comprehensive overview of the PCI DSS and explains how to implement its demanding security requirements. The guide also contains a wealth of background information about payment cards and the… Continue Reading
PCI SSC has announced changes to the QSA Qualification Requirements lately. The supplementary document dated June 2015 reads: “The requirement to possess at least one industry-recognized certification is effective as of January 1, 2016 for new QSA Employees. For QSA… Continue Reading
Have you ever wondered the difference between the above frameworks? I’ve put together a quick cheat sheet explaining the basics of: SABSA – Sherwood Applied Business Security Architecture TOGAF – The Open Group Architecture Framework COBIT – Control Objectives for Information and Related Technology… Continue Reading
ISC2 announced updates to its CISSP and SSCP certifications. There are no information about CISSP Concentrations: ISSAP, ISSEP, ISSMP updates. An official email stated: “What does this mean for (ISC)2 members? Beginning April 15, 2015, all CISSPs and SSCPs will… Continue Reading
Calling all CISSP in good standing. Take the survey and claim 5 CPEs. “A Job Task Analysis (JTA) workshop for the CISSP was recently completed. The workshop participants produced an updated draft content outline upon which the new CISSP examination will… Continue Reading
What should I be logging in Windows to pass PCI DSS assessment v3.0? – this and similar questions come up rather often when it comes to fulfilling Section 10 of PCI DSS v3.0. In Part 1, we are looking at… Continue Reading