Goodwill, a nationwide chain that sells donated apparel and other household items has reportedly been involved in a series of credit card breaches. Investigators are currently looking into the potential theft; however, nothing has been confirmed. Appropriate action will be taken if it is discovered there was in fact a data breach. Suspicion began to […]
Tag: PCI
Part 7: Road Map to PCI
Documentation is an incredibly valuable and often times required step for ensuring compliance with the PCI DSS. At times documenting processes or procedures can be time consuming, luckily documenting user privileges for systems that touch your card data environment is a fairly simple process. […]
Part 6: Road Map to PCI
Ensuring that you develop and maintain secure systems and applications is critical to ensuring the security of cardholder data when transactions flow through your processing methods. It is also very important to remember that this requirement applies to ALL systems and applications within your card data environment…
Part 5: Road Map to PCI
We are moving into the third area of focus in the Data Security Standards, “Maintain a Vulnerability Management Program.” There are two requirements that must be met in order to successfully Maintain a Vulnerability Management Program, and this post aims to help you understand how to meet these requirements. […]
EMV Adoption is Actually A Pretty Good Deal
Currently, the obvious reason to update your terminals to be EMV capable is to better protect everyone who makes payments in person with their cards. As more and more merchants begin to utilize these EMV terminals, the amount of card present fraud drastically decreases. […]
Windows XP is Officially Retired
April 8th has come and gone and Windows XP is now officially retired. Microsoft is no longer supporting Windows XP and that means they will no longer patch bugs and security flaws in the software, making the utilization of Windows XP on your machines a major security threat. […]
Part 4: Road Map to PCI
Welcome back to another installment of our series on the PCI Data Security Standards: “Encrypt transmission of cardholder data and sensitive information across open public networks.” This month we will take a look at the fourth requirement your organization needs to follow in order to meet the PCI DSS. […]
Reducing Fraud: Card Not Present Fraud Prevention
Card not present (CNP) fraud has continued to increase as more and more business is being conducted in an e-commerce environment. According to Cardhub, “Credit card and debit card fraud resulted in losses amounting to $11.27 billion during 2012.” It goes on to state that, “merchant losses mainly occur […]
Part 3: Road Map to PCI
This month we move into a new area of focus for the PCI Data Security Standards, Protect Cardholder Data. This area of focus is comprised of two specific requirements from the card brands, and they are crucial to making sure that your cardholders’ data is secure. […]
Takeaways from the Target Breach
In what could be the largest breach to date, Target announced that thieves were able to compromise data for some 70 million people and approximately 40 million credit and debit card accounts. The data was exposed for transactions made between November 27 and December 15, 2013. The breach is believed[…]