PCI AND COMPLIANCE Articles
Data breach fines can risk more harm than good, experts say
Regulations designed to help guard consumer financial accounts and privacy may start doing more harm than good if taken too far
The Children's Place, popular kid's clothing retailer, hit with database breach
The Children's Place says someone accessed their email database and sent out a phishing message in an attempt to gather credit card information
PCI DSS compliance cuts breach risk, says report
Organizations that are PCI DSS compliant suffer fewer breaches, but most do not think the standards have had a positive impact on security
The (sorry) state of software security
Analysis of software security defects shows that while more that half of all applications may initially contain an unacceptable level of security flaws, it doesn't necessarily take long to code them into shape
Data breach notification fatigue: Do consumers (eventually) tune out?
Data breach notifications are flying en masse following the Epsilon Interactive breach, but are they doing customers any good?
Accellion proffers secure cloud collaboration workspaces
The company hopes to provide CISOs rattled by more users turning to consumer cloud-based services a way for more controlled cloud workspaces.
How Kelly Services manages risk in the cloud
CSO contributor Bob Violino recently interviewed Rosie Rivel, senior manager of IT global risk and compliance at Kelly, regarding risk and the cloud.
IT GRC tools: Control your environment
IT governance, risk and compliance (GRC) tools help bring order to enterprises' crazy quilt of overlapping regulations, redundant audit programs and manual processes
RSA 2011: Why Helzberg Diamonds chose tokenization over encryption for PCI
Florian Yanez, manager of technical systems for Helzberg Diamonds, explains how tokenization helped the company solve data storage and PCI DSS challenges.
Expert: WikiLeaks complicates compliance, will create copycats
SenSage CEO Joe Gottlieb explains how WikiLeaks was just the beginning of a larger challenge to come, in terms of compliance efforts and a future full of WikiLeaks-inspired content leakers.
