PCI DSS Archive
With twelve requirements to meet, PCI DSS (Payment Card Industry Data Security Standard) compliance is neither cheap nor easy. In fact, depending on the size of your organisation and the complexity of your CDE (cardholder data environment), it could take …
Organisations that fall outside of Levels 1of the PCI DSS (Payment Card Industry Data Security Standard) can attest to compliance with an SAQ (self-assessment questionnaire). You will fall into one of those levels if your organisation processes fewer than six …
If your business handles debit or credit card data, you’ve probably heard of the PCI DSS (Payment Card Industry Data Security Standard). It’s an information security framework designed to reduce payment card fraud by requiring organisations to implement technical and …
Technology can only do so much to protect an organisation from data breaches. That’s why Requirement 12 of the PCI DSS (Payment Card Industry Data Security Standard) instructs organisations to implement policies and procedures to help staff manage risks. Employees …
Organisations that accept online payments must urgently address the threat of web-based skimming, the PCI SSC (Payment Card Industry Security Standards Council) has warned. The alert, issued in partnership with the Retail & Hospitality ISAC (information sharing and analysis centre …
IT Governance has been working with gambling operators for more than 15 years, helping them to comply with a range of regulations, so we were interested to see evidence that two of the UK’s biggest gambling trade bodies are set …
Organisations that handle payment card information are legally required to regularly scan and test their systems, but too few understand that these are separate things. Any organisations that process, transmit or store cardholder data must comply with the PCI DSS …
Gambling addiction remains a contentious issue for the betting industry, especially in light of ongoing concerns about the effectiveness of self-exclusion schemes such as GamStop and the political row about restricting the maximum stakes on FOBTs (fixed-odds betting terminals). In …
On 16 January, the PCI SSC (Payment Card Industry Security Standards Council) published the PCI Secure Software Standard and the PCI Secure Software Lifecycle (Secure SLC) as part of a new PCI Software Security Framework designed to ensure secure design, …
The hospitality sector has embraced consumer-facing technology. Chatbots, AI, robotics – such as Hilton’s robot concierge, Connie, which hit the headlines in 2016 – the IoT (Internet of Things), recognition technology, virtual reality, augmented reality, automation, voice search and virtual …
