To be PCI compliant means there is a Security policy in place. We can help with a security policy or with the documentation for PCI compliance – There are a lot of items to check… PCI compliance = Security Policy

What is the reason one hires an independent CPA to check your financial books? Unfortunately even where employees are trustworthy and capable, it makes sense to periodically review their work. Even the PCI Security Standards… Independent review of your IT Security

DARKReading has the highlights of the changes of v3.0 compared with v2.0 SearchSecurity also has a synopsis – with the 5 most important changes: 1. Pentesting (Penetration testing) 2. inventory system components 3. Vendor relationships 4. Antimalware… New PCI DSS v3.0 released Nov 2013

Have you checked wifi signals as to their effectiveness? Is your wifi router/ access point using good encryption technology? Wardriving: Peter Shipley coined the term “wardriving” the practice of deliberately searching a local area looking for… Wardriving: when a hacker checks wifi signals

PCISecurityStandards.org  has a website and it’s response to the Target Data breach: “As part of this security effort, the Council maintains that adherence to and maintenance of the Payment Card Industry Data Security Standard (PCI DSS) is… PCI compliance – what does it entail?

Dark Reading has an interesting article about how Target was compliant with PCI(Payment Card Industry) standards and it was not enough. The Point of Sale terminals were infected with malware specific to Point Of Sale terminals,… Develop new & better security postures – PCI compliance is not enough