Companies that process credit card payments must comply with the Payment Card Industry (PCI) Data Security Standard (DSS). Compliance efforts require all PCI-eligible companies to implement all Requirements within the DSS framework, then document the security controls protecting cardholder data (CHD) via official PCI assessment. (more…)
Category: Compliance Standards
Staying informed about all of the cyber security compliance standards is essential to keeping your company safe from hackers. Read on to learn about the various steps you can take to stay up to date with your industry’s compliance standards.
-
Top NIST Access Control Best Practices
Companies that work with the Department of Defense (DoD) in contractor or vendor roles need to meet certain safety thresholds. These have been defined in the Defense Federal Acquisition Register Supplement (DFARS). (more…)
-
What are the PCI 3.2 Self-Assessment Questionnaire Types?
If your company processes credit or debit card payments, you likely need to comply with the Payment Card Industry (PCI) Data Security Standards (DSS). The Security Standards Council (SSC), headed by the five Founding Members (Visa, Mastercard, Discover, American Express, and JCB International), enforces compliance by requiring eligible companies to submit annual documentation verifying their implementation of PCI controls. (more…)
-
Key Changes in HITRUST Version 9.4
The HITRUST CSF is a comprehensive cybersecurity framework that compiles various regulations’ controls into a single, streamlined compliance structure. The HITRUST Alliance updates the CSF frequently to accommodate trends in cybersecurity, such as emerging risks, community needs, and changes to other regulatory frameworks. (more…)
-
Is PCI Compliance Mandatory for E-Commerce Merchants?
The Payment Card Industry (PCI) Security Standards Council (SSC) oversees regulations that apply to various companies that store, process, or transmit credit card data. The SSC’s Founding Members (Visa, Mastercard, American Express, Discover, and JCB International) ensure that companies across industries comply with the Data Security Standard (DSS). (more…)
-
What is the HITRUST CSF Assurance Program?
The HITRUST Common Security Framework (CSF) Assurance Program is a framework for compliance assessment and risk management that is the most widely adopted in the healthcare industry. (more…)
-
PCI Compliance for Credit Card Processing
PCI Compliance for credit card processing is the responsibility of all organizations in the payments industry. The primary objective of these regulations is to ensure the security of credit card transactions from cybercriminals. (more…)
-
Your Guide to PCI Vulnerability Scan Requirements
PCI vulnerability scan requirements are not difficult to understand with expert guidance. The primary focus of this government regulation is information security. It locates vulnerabilities and gaps within a company’s digital architecture. (more…)
-
GDPR Requirements Made Simple
The EU’s General Data Protection Regulation (GDPR) is one step in the crusade to strengthen citizens’ fundamental rights in the digital age. Therefore, it’s essential for companies to abide by GDPR when handling EU and EEA citizens’ private data. Failure to do so results in severe ramifications. (more…)
-
The Importance of Cybersecurity Documentation in The Workplace
Cyber attacks are growing in complexity, and the damage these can cause in an organization can be significant and debilitating. Cybersecurity documentation can help offset and reduce these risks by outlining security efforts to personnel about responding to disasters or incidents.