Health care breach victims plummet
Tougher rules and big settlements are said to be behind the fall in affected clients, but one group calls it the 'calm before the storm'
PCI and Compliance
Compliance strategies for PCI-DSS, PCI PA-DSS, Sarbanes-Oxley, ISO27005, HIPAA, data breach notification and other security regulations and requirements
PCI and Compliance articles
Security and vulnerability assessment: 4 common mistakes
Uncovering problems and fixing security gaps can go awry with these oft-made blunders. Here are four examples of where vulnerabilities assessments typically go wrong
Little sympathy for merchants in disputes over PCI violations
Genesco files $13M suit, arguing penalties from banks processing credit-card payments occuring without evidence card data has been stolen
Taking copyright fight to ISPs too punitive, say critics
Copyright Alert System, which could slow or suspend your Internet service, said to lack due process
Payment Card Industry clears up confusion over cloud use
New Data Security Standards (DSS) for the cloud make clear the responsibilities of merchants and service providers
Nationwide/Allied security breach highlights litigation fears
Some experts believe civil litigation can become an effective deterrent to sloppy security at financial institutions
Heist once again highlights e-banking vulnerabilities
Commercial customers need to heed warnings from cyber thefts in Missouri, Maine
Courts widening view of data breach damages, lawyers say
Would make companies liable for steps taken to prevent financial harm, which might require then carrying insurance to cover identity theft
The race toward compliance is 'not optimal'
More security managers find themselves running compliance programs rather than performing security and risk management.
GRC: Trying to take the bite out of risk
Is governance, risk and compliance (GRC) software the right choice for your company?
