There’s nothing worse than finding out 36 servers stopped logging over 90 days ago.
True story. That happened in 2016.
The wasn’t enough chocolate chip cookies to make up for the painful conversations I had to have with everyone involved in the snafu.
I’ll be the first to admit that continuous PCI Compliance was beyond my grasp when I started my PCI journey in 2012. I was doing my best not to drown in a sea of confusion and chaos.
If something like our newest course, Implement Continuous PCI Compliance, existed a decade ago, I would have been all over this.
Read More!
Is your PCI DSS Compliance program is all over the place? Do you have your asset inventory in 7 different spreadsheets? If you answered yes, maybe it’s time to automate key controls and your assessment process. Read on to find out how!
These PCI DSS Compliance tales would be funny if they weren’t true. Maybe you’ve heard one or two yourself!
If you’re not already managing your scope for PCI DSS v3.2.1, you’ll be in for a rude awakening with the requirements in PCI DSS v4.0 that need to be in place by March 31, 2024.
Let’s be real for a second – the report on compliance is mandatory for all level 1 merchants and any merchant regardless of level that is required to provide a report on compliance by either their acquirer or card brand. Most level 1 merchants fall out of compliance shortly after the ink is dry on their most recent report. Why? Because they don’t have a sustainability program. The RoC is treated like a bad surprise every year and that creates wasted effort, lost money, and burned out staff.
