data security news from FierceComplianceIT

We've been talking about the next iteration of Payment Card Industry Data Security Standard (PCI-DSS) for quite a while; the timeline for the release of PCI DSS 2.0 was never a secret. You could say... Read more...

We've suggested on several occasions that in this time of budgetary constraint, compliance and security projects would likely be easier sells internally, with risk management not far behind. As the... Read more...

The PCI data security standard, or PCI-DSS, is pretty much a fact of life for many firms. Since its inception, there has been loads of debate about how effective PCI-DSS really is. There's also been... Read more...

If you run your own small consulting operation or other business, you've likely been advised or tempted to set up a separate bank account dedicated to your business. But given the risk of online... Read more...

Alberto Gonzalez was the mastermind of the massive, headline generating data breach at Heartland Payment Systems, TJX and others, but it's clear he had some help from some former employees of top... Read more...

It can enhance your street cred with the control guys, especially those who interface with the IT GRC guys, if you speak a bit of their language. Not to drag you into the weeds, but section 7 of the... Read more...

Unfortunately, 2009 was a newsy year when it comes to high-profile data breaches. The headlines conjure up some powerful memories: Alberto Gonzalez; Heartland Payments Systems; T.J. Maxx. By... Read more...

When it comes to cloud computing, security is at the top of most people's list of concerns. We've noted that by one estimate, IT cloud services will form 25 percent of all incremental global IT... Read more...

The competition is fairly intense in the GRC industry right now. Companies caught in a miserable recession aren't investing like they used to, even risk management and compliance have been hit. So... Read more...

Visa has released end-to-end encryption best-practice guidelines that represent an initial stab at boosting efforts across companies "to develop a common, open standard while providing guidance to... Read more...