Strategy: PCI
Ready to Outsmart PCI? New Techs Help IT Comply
The PCI Data Security Standard is costly, complex and rigged against the retailers, merchants and processors that must comply with it. But those very attributes may be the most potent catalyst to bring about meaningful protection of credit card data—not because of the PCI requirements themselves, but because PCI will drive merchants toward end-to-end encryption and tokenization.
Table of Contents
3 Author’s Bio
4 PCI Refresher
5 PCI Positives and Negatives
5 Figure 1: Requirements Garnering Resources
7 Figure 2: Added Resources for Compliance Efforts
8 Should QSAs Be Liable?
9 Reducing the Scope
9 Figure 3: Scope of Encryption Use
12 Figure 4: Security Oversight
14 Caution Signs
14 Choosing a Vendor
15 Figure 5: Current and Planned Encryption Use
16 More Carrots, Fewer Sticks
About the Author
Andrew Conry-Murray is business editor at InformationWeek. He writes about information management and compliance issues. Andrew has covered information technology topics including security and network and information management for nine years, with Network Computing and Network Magazine before joining InformationWeek. He is a co-author of The Symantec Guide to Home Internet Security.
Be the first one to comment.