PCI AND COMPLIANCE Articles
Virtualization, Cloud Computing and the PCI DSS
How do virtualization and cloud usage affect compliance with PCI? QSAs Ben Rothke and David Mundhenk provide practical advice.
Five Security Missteps Made in the Name of Compliance
In the hurry to meet a regulatory compliance deadline, companies risk making some costly security mistakes. Here are five examples.
Report: Most Organizations Now Suffer Cyber Attacks
Symantec's 2010 State of Enterprise Security finds three quarters of all enterprises have been hit by a cyber attack, and security is now more pressing than any other concern.
How to Make Things Worse With IT Security Technology
Companies are widening their security holes by haphazardly installing all the technological defenses they've purchased.
Meeting of the Minds
Adam Shostack and Andrew Jaquith take on three critical questions about the direction of the information security field.
So What Is PCI Really About?
CSO's publisher says card issuers must do as they say, not just say what to do.
Report: CISOs Keep Breach Costs Lower
The latest "Cost of a Data Breach" survey from the Ponemon Institute finds companies with a CISO are better able to handle loss of sensitive information.
The Great PCI Security Debate of 2010: Transcribed
For those who prefer to read as well as listen, here's a partial transcript of the PCI security debate that appeared on CSO Senior Editor Bill Brenner's Security Insights podcast and Martin McKeay's Network Security podcast.
PCI DSS, Come Forward and Be Judged
CSO Senior Editor Bill Brenner explains how seven IT security guys with differing views on the value of the PCI Data Security Standard came together for the mother of all debates. Before you get to hear the debate next week, go to the bottom of this article and get your PCI DSS primer.
Ten 2010 IT Security Predictions, Part 2: Schmidt and ICSA Labs
Howard Schmidt, former eBay CISO and vice chairman of the President's Critical Infrastructure Protection Board, and the folks from ICSA Labs, a vendor-neutral testing and certification lab, offer 10 predictions for security in 2009. (Second of 2 parts).
