Recently there has been a series of news items as enterprises announce they have been breached and their sensitive customer and financial records compromised.  According to Verizon 2011 Breach report 92% of the attacks were external and 76% of all data breached came from servers.  The PCI Security Standards Council is an open global forum formed in 2006 that is responsible for the PCI Data Security Standard (PCI DSS), a standard that is designed to protect cardholder data.

I sat down with Lindsay Parker, Cisco global retail industry director about Cisco’s current investments and efforts to help retailers and merchants secure customer credit card data and maintain compliance with PCI DSS.

Here are some key points from our conversation:

Read More »

Tags: Cisco, credit card, design guide, EMC, HyTrust, merchant, payment card industry, PCI Compliance, retail, retailing, RSA, security, VCE, Verizon Business

I was reading an article recently about what auditors really think about the security and compliance requirements that they test for when doing a PCI DSS compliance audit. I was more than a little surprised to read that over 60% of the 505 auditors in the study referenced said the organizations they audit don’t believe compliance improves their data security effectiveness. I’m a bit perplexed by that. After all, there are only 12 requirements in the PCS DSS specification, and they seem pretty straightforward and simple to me. Read More »

Tags: compliance, government, merchant, military, pci, retail, security