Nowadays everything is done electronically. To make things even easier large data is stored and accessed in the cloud. Although this is considered more secure, there are no guarantees. States are taking more precautions than ever to address personal data security which means businesses must m ...
Read More
The PCI Council officially released PCI DSS version 3.0 in January, 2014. Many merchants are still working through their PCI Compliance audit that started in 2013 for the requirements of version 2.0. Clearly, their Report on Compliance (ROC) will be based on providing evidentiary support requir ...
Read MoreAn obvious discovery of any malicious finding is an incident and immediate actions should take place to arrest and minimize effects. However, there are incidents that fall into grey areas. Any actual incident has implications such as legal, compliance, and other regulatory components. A set of ...
Read MoreLarge breaches similar to Target and Neiman Marcus have already occurred during the peak December 2013 season that are still going through QIRAs by (Qualified Incident Response Assessors) and haven't been published yet. However, they all point out to the same techniques used in the other two at ...
Read More