The latest release of the PCI DSS standard adopts some significant changes for card processing security, but some security professionals feel it…

← Back to Blog

The latest release of the PCI DSS standard adopts some significant changes for card processing security, but some security professionals feel it does not go far enough. It sets a migration away from SSL and TLS, adds MFA requirements to those who administer card data and focuses on ‘softer’ security requirements, like security awareness. Requiring companies to demonstrate that they have effective security processes and procedures. A major criticism is that the changes are reactive rather than proactive and do not offer security protection to card holders outside the PCI technical network.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6131719640411361280

Categories

Cyber Risk, Cybersecurity, Governance

Tags