Tuesday, April 27, 2010

PCI security compliance experts share ways to get compliance 'done right'


PCI security compliance experts share ways to get compliance 'done right'

Far too many merchants try to achieve compliance with the Payment Card Industry Data Security Standard (PCI DSS) by finding ways to implement compensating controls with part of the standard and end up spending way too much money in the process.

"If you don't agree with a particular PCI provision and you think you can do things better, that's fine, but you have to build a case for a compensating control," said Anton Chuvakin, co-author of "PCI Compliance: Understand and Implement Effective PCI Data Security Standard Compliance."

See full Article.