The formation of the PCI Security Vendor Alliance is a positive step towards educating firms about the best practices of the Payment Card Industry data security standard (PCI DSS).
However, with the deadline for compliance looming (30 June) for
financial institutions, their merchants and service providers, I urge
them to look at their implementation and management.
In order to comply with the PCI standard, firms need to address every
element of the standard. To ensure easier audits, it is key that
organisations have the software in place to record all integrity checks
and detect violations so that they can provide the proof required to
verify compliance with intenal policies and external regulations.
As cash becomes obsolete, the effective compliance and management of the
stringent standards set by the PCI Security Standards Council is vital
to improving the security of payment transactions.
Paul Gostick, EMEA marketing manager, Tripwire.