RSI Security recently hosted a webinar titled Building a Robust AI Governance Framework with ISO/IEC 42001. Marketing Coordinator Anna-Laure Iman opened by introducing the speakers, John McLaughlin, Sales Development executive, and Patrick Murphy, Manager of Cybersecurity and Risk Services, who would lead the discussion about effective ISO 42001 governance.
Blog
-

Executive Development Module 5: Meaning of Cybersecurity in the World (Recap)
RSI Security hosted our latest Executive Development Series webinar, Meaning of Cybersecurity in the World, on January 17, 2025. Our founder, John Shin, began with a brief recalibration exercise emphasizing the importance of engagement and level-headedness. To catch up on prior EDS sessions, check out our recaps for Modules One, Two, Three, and Four.
-

Comprehensive PCI Compliance Checklist 2021 (With Expected Updates for PCI DSS v4.0)
Your Complete PCI Compliance Checklist
In today’s world of digital payments, having a standardized set of rules and policies to secure cardholder data is essential. The Payment Card Industry Data Security Standard (PCI DSS) provides a clear path to compliance, though keeping up with frequent updates can be challenging. Our comprehensive PCI compliance checklist 2021 consolidates all the latest requirements, including expected updates for PCI DSS v4.0, so your organization stays secure and audit-ready.
(more…) -

10 Benefits of Being EI3PA Compliant
Last year, 56% of organizations were hit by a breach caused by one of their third party vendors. Let that sink in for a moment.
56%.
What has been the cause for the uptick in third party breaches lately? Supply chain attacks. These coordinated, front-line network assaults can be difficult for businesses to tackle internally. When you’re also working with third-party vendors that are utilizing your network, maintaining a high security posture during operating hours (which for some may end up being 24/7) can be near impossible. Unless these third-party vendors operate entirely under the same roof or network as your business, you won’t have the same level of control over credit-based compliance efforts as you would with your own internal operations. This lack of consistent control over credit-based compliance can leave your company in a tailspin after being hit by a devastating supply chain attack.
-

Leveraging PCI SSF for eCommerce
In the world of eCommerce, digital storefronts make it easier than ever for B2C and B2B clients to find the goods and services they need and pay for them swiftly—and securely. Adhering to the PCI SSF helps ensure secure payment processes, allowing business operations to remain protected and uninterrupted.
-

A Beginner’s Guide to PCI Compliance Outsourcing
PCI Compliance Outsourcing: Why It Matters
Protecting cardholder data is essential when accepting payments through credit cards, debit cards, or payment processing software. Any organization that processes, stores, or shares cardholder data (CHD) must comply with the global PCI DSS framework. Implementing these requirements can be more efficient by leveraging PCI compliance outsourcing to an experienced third party. Whether you want to make your website PCI DSS compliant or secure other areas of your business, outsourcing provides expert guidance, reduces risk, and streamlines compliance across your enterprise.
(more…) -

Securing Payment Software with PCI SSF: Strategies to Minimize the Attack Surface
The Payment Card Industry Software Security Framework (PCI SSF) offers a comprehensive approach to securing software that handles payment transactions. Minimizing the attack surface of software is a critical component of PCI SSF, which helps protect sensitive data and prevent unauthorized access. This blog post explores effective strategies for reducing the attack surface of your software to comply with PCI SSF and enhance overall security.
-

How to Leverage Network Segmentation for Hospitality Sector PCI SSF Compliance
The hospitality industry is a prime target for cybercriminals due to the vast amount of sensitive customer data it processes and stores, including payment card information. Ensuring compliance with the Payment Card Industry Software Security Framework (PCI SSF) is crucial for protecting this data and maintaining customer trust. One effective strategy to achieve PCI SSF compliance is network segmentation. This blog post explores how hospitality businesses can leverage network segmentation to enhance their security posture and meet PCI SSF requirements.
-

Maximize ROI and Protect Your Retail Business with a vCISO
For retail companies, managing cybersecurity effectively can be challenging, especially when hiring a full-time Chief Information Security Officer (CISO) feels out of reach. This is where a virtual Chief Information Security Officer (vCISO) comes into play. A virtual CISO provides the expertise and leadership of a CISO but on a flexible, cost-effective basis. Here’s how a vCISO can help maximize your ROI and protect your retail business.
-

Securing Payment Software: How the PCI SSF Modular System Enhances Flexibility and Security
The Payment Card Industry Security Standards Council (PCI SSC) established the PCI Software Security Framework (SSF) to address the evolving landscape of software security. One of the core components of this framework is its modular system, designed to provide a flexible, comprehensive approach to securing payment software. This blog post delves into what the PCI SSF’s modular system is, its structure, and how it benefits organizations striving for robust software security.
