PCI AND COMPLIANCE Articles
2009 Rewind: 3 Tales of FUD
CSO Senior Editor Bill Brenner chooses his three nominees for 2009's worst case of messaging based on fear, not fact.
Compliance as Security: The Root of Insanity
BT's Jason Stradley on how companies lose their way by confusing a completed compliance checklist with ironclad security.
Ending the PCI Blame Game
Turiss CEO Phil Mellinger, former CISO of First Data, expresses concern over the costly infighting over financial responsibility for breaches and proposes five constructive steps
The Mass. 201 CMR 17 Survival Guide
As companies scramble to meet the requirements of the Bay State's data security law, CSOonline.com offers this collection of articles and podcasts to help IT security practitioners and compliance officers find the best approach.
PCI DSS: No Angel, But Certainly Not the Devil
Security luminaries Anton Chuvakin and Ben Rothke explain why 451 Group analyst Josh Corman is off base when he compares PCI security to a devil and "No Child Left Behind."
Federal Data Security Law: 'Careful What You Wish For'
A cybersecurity bill advanced further up the U.S. Senate gauntlet last week, and some IT security practitioners aren't happy about it.
Analyst: PCI Security a Devil, 'Like No Child Left Behind'
Joshua Corman, research director for enterprise security at The 451 Group, says the private sector's obsession with PCI DSS compliance is blinding it to larger threats.
Why Pen Testing Is Central to Pennsylvania's App Security
In this Q&A, Commonwealth of Pennsylvania CISO Robert Maley explains why penetration testing has become an essential tool in his security arsenal.
End-to-End Encryption: The PCI Security Holy Grail
Encryption seems like the simple answer to data security problems. So why is end-to-end encryption not ubiquitous? Implementation challenges abound. Here's how to handle encryption's 'key issues'.
4 Ways to Get the Most from Your PCI QSAs
In response to Heartland CEO Robert Carr's claim that his qualified security assessors (QSAs) missed key weaknesses during a PCI security audit of his company, security experts offer tips to get the most from an assessment.
