Protecting PAN According to PCI DSS Rules

Aug 24, 2022 Continuum GRC 0 Comment

It’s crucial that any company handling consumer cardholder information, including card numbers, protect that information from any and every unauthorized user. The PCI Security Standards Council has determined that to promote security and usability, it’s not enough to secure a system perimeter and encrypt data. Instead, companies have to approach data obfuscation through a series of requirements that protect it from theft while allowing the company to utilize it for regular commercial purposes.

Here, we’ll discuss Primary Account Numbers (PAN) and how you must protect them under PCI DSS.

Audit Machine Awareness

Three Examples of PCI DSS Non-Compliance and What You Can Learn from Them

Aug 12, 2022 Continuum GRC 0 Comment

The public and private sectors have been increasingly under assault by hackers looking to take information–whether for espionage, blackmail, or profit. And while some of the past few years’ high-profile government and industrial attacks have been at the center of many cybersecurity stories, the reality is that hacks in the retail and consumer spaces have been incredibly impactful.

In fact, some of the largest data breaches have been due, in part, to a lack of compliance with PCI DSS standards… and this presents a major challenge for merchants and payment processors who want to protect their customers’ information.

Here, we’ll cover three major security breaches related to PCI DSS compliance and what you can learn from them.

Awareness

What Are PCI DSS Future-Dated Requirements?

Jul 27, 2022 Continuum GRC 0 Comment

The good news? PCI DSS 4.0 is out, but the adoption schedule for the new standard is quite generous. The better news? The PCI Security Council has decided to implement a tiered approach to adoption. The first will finalize when the previous version (3.2.1) is officially retired in 2024. The second, known as the “future dated” requirements, will have an additional year.

This article will cover the future-dated requirements from PCI DSS version 4.0.