It's imperative that IT professionals become well-versed in all of the PCI DSS regulations.
Editor's Note: This article introduces the free white paper "PCI DSS Compliance with Managed File Transfer" available from the MC White Paper Center.
PCI DSS compliance requirements will continually evolve under the auspices of the PCI Security Standards Council throughout a newly defined 36-month lifecycle. This may mean that the security "tweaks" that IT implements today for PCI DSS 2.0 may be inadequate to handle the data security requirements of the next version of the standard.
However, by rethinking the use of underlying components that IT uses in its data transfer arsenal, forward-thinking IT shops are arming themselves to meet the changing requirements of PCI DSS and other compliance requirements. With better—as well as more—configurable, automated, and secure data transfer tools, these professionals are building new technology strategies to meet and/or exceed the compliance requirements for today and tomorrow.
PCI DSS Version 2.0 is here, and companies are challenged with the task of modifying their security systems to meet the requirements. But some IT groups are taking a new and creative path toward PCI DSS compliance. Instead of struggling to meet compliance requirements with legacy data transfer tools, they are implementing managed file transfer solutions that include DMZ gateways.
This unique and cost-effective strategy provides better, more configurable tools to help IT staffs achieve PCI DSS compliance more easily, while laying a good foundation for future security enhancements.
What Is PCI DSS?
The Payment Card Industry Data Security Standard (PCI DSS) is the information security standard for organizations that handle cardholder information for the major debit, credit, prepaid, e-purse, ATM, and POS cards. It's defined by the Payment Card Industry Security Standards Council as a method to increase privacy controls over cardholder data and reduce credit card fraud due to accidental or deliberate exposure.
PCI DSS 2.0 was released in 2010 and required for adoption by all entities that process, store, or transmit credit/debit card data by January 2011.
Validation of compliance with PCI DSS must be performed annually, beginning January 1, 2012, by an external Qualified Security Assessor (QSA) at organizations that handle large volumes of transactions, or by a Self-Assessment Questionnaire (SAQ) at companies managing smaller volumes.
The Danger of Non-Compliance
If your organization experiences a security breach—without proof of compliance to PCI DSS 2.0 at the time of the breach—the lack of compliance will result in fines and penalties from the payment card brand (Visa, MasterCard, etc.). The fines are not trivial: $5,000 to $100,000 per month until your organization attains compliance, and could result in termination of your merchant account by the bank.
Therefore it's imperative that IT professionals become well-versed in all of the PCI DSS regulations to learn how to most efficiently implement its technical compliance requirements in their organization.
Find out more by downloading the free white paper "PCI DSS Compliance with Managed File Transfer" from the MC White Paper Center.
More than ever, there is a demand for IT to deliver innovation. Your IBM i has been an essential part of your business operations for years. However, your organization may struggle to maintain the current system and implement new projects. The thousands of customers we've worked with and surveyed state that expectations regarding the digital footprint and vision of the company are not aligned with the current IT environment.
TRY the one package that solves all your document design and printing challenges on all your platforms. Produce bar code labels, electronic forms, ad hoc reports, and RFID tags – without programming! MarkMagic is the only document design and print solution that combines report writing, WYSIWYG label and forms design, and conditional printing in one integrated product. Make sure your data survives when catastrophe hits. Request your trial now! Request Now.
Forms of ransomware has been around for over 30 years, and with more and more organizations suffering attacks each year, it continues to endure. What has made ransomware such a durable threat and what is the best way to combat it? In order to prevent ransomware, organizations must first understand how it works.
Disaster protection is vital to every business. Yet, it often consists of patched together procedures that are prone to error. From automatic backups to data encryption to media management, Robot automates the routine (yet often complex) tasks of iSeries backup and recovery, saving you time and money and making the process safer and more reliable. Automate your backups with the Robot Backup and Recovery Solution. Key features include:
Business users want new applications now. Market and regulatory pressures require faster application updates and delivery into production. Your IBM i developers may be approaching retirement, and you see no sure way to fill their positions with experienced developers. In addition, you may be caught between maintaining your existing applications and the uncertainty of moving to something new.
IT managers hoping to find new IBM i talent are discovering that the pool of experienced RPG programmers and operators or administrators with intimate knowledge of the operating system and the applications that run on it is small. This begs the question: How will you manage the platform that supports such a big part of your business? This guide offers strategies and software suggestions to help you plan IT staffing and resources and smooth the transition after your AS/400 talent retires. Read on to learn:
LATEST COMMENTS
MC Press Online