Cyber Security Case Study: Maintaining PCI Compliance
HALOCK partners with a research university to conduct a comprehensive PCI DSS project to ensure compliance. (more…)
Category Archives: PCI Compliance
HALOCK partners with a research university to conduct a comprehensive PCI DSS project to ensure compliance. (more…)
PCI DSS Case Study: Security Gaps in Policy & Practice
During a PCI Assessment for a global retailer, HALOCK discovered and helped resolve significant breakdowns in security policies and practices implemented at the stores. (more…)
Keeping Track of PCI DSS v4.0
UPDATE: New Blog on PCI DSS 4.0
Get updates on the status on PCI DSS review of the 2019 RFC comments, when the final version of PCI DSS is planned to be completed, timing of the next request for comments (RFC), and information about the RFC feedback they received. (more…)
PCI DSS v4.0 Expected Mid-2021
UPDATE: New Blog on PCI DSS 4.0
Get updates on the status on PCI DSS review of the 2019 RFC comments, when the final version of PCI DSS is planned to be completed, timing of the next RFC, and information about the RFC feedback they received. The new blog covers timing of supporting documents, transition between PCI DSSv3.2.1 and v4.0, an explanation of “future-dated requirements,” development and transition timelines for the project and more.
The PCI SSC just announced that the final version of PCI DSS v4.0 won’t be published until 2021 and won’t be required for 2 years after the publication date.
(more…)
Payment Processing in a Remote Working Environment
Organizations are facing a lot of change with remote work set ups – in both physical location and operational shifts. Especially challenged are businesses that manage credit card information electronically and over the phone. These new working conditions unearth new risks for sensitive data. Social distancing can also bring about more social engineering attempts. According to the U.S. Secret Service, social engineering/phishing is a very common online attack right now.* (more…)
2020 Planning for The Year of Privacy
Download your 2020 Calendar
Noted with key dates to help keep you compliant. (more…)
How is PCI DSS Enforced?
Unlike most regulations you may be familiar with, the PCI DSS is enforced by contract – here is a quick look at the process; learn more about how you can be PCI compliant. (more…)
PCI Software Security Framework
For businesses using PA-DSS assessed applications the time is near to start considering the new Software Security Framework that the PCI Council that will be mandated soon. (more…)
Does CCPA Affect You? What the 2020 Deadline Means for Reasonable Security
The California Consumer Privacy Act (CCPA) and more states are shaping data privacy management for reasonable security.
(more…)