Free Newsletter
Register for our Free Newsletters
Access Control
Deutsche Zone (German Zone)
Education, Training and Professional Services
Government Programmes
Guarding, Equipment and Enforcement
Industrial Computing Security
IT Security
Physical Security
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec

Retailers To Be PCI Compliant This Weekend

Tenable Network Security : 29 June, 2012  (Technical Article)
Tenable Network Security comments on PCI Compliance requirements and the need to go beyond compliance to achieve full protection
Retailers To Be PCI Compliant This Weekend
After this weekend, all retailers accepting payment card transactions will be expected to either use a specialised firewall for protecting their Web applications or to have completed a Web application software code review for finding and fixing vulnerabilities in these applications. Companies that fail to implement either measure will be deemed to be out of compliance with PCI starting the Saturday the 30th of June.

David Cummins of Tenable Network Security has commented on this: “When it comes to PCI compliance, it’s a fallacy that if an enterprise ‘ticks all the boxes’ it will be protected from attack. PCI compliant organisations can, and do, get breached.

“This is because compliance fluctuates. Enterprises should be monitoring compliance levels over time, continuously, as this is what is critical to maintaining a secure working environment.

“As such, effective of June 30th, PCI will require companies to provide evidence of quarterly internal vulnerability scans and both internal and external vulnerability scans after any significant network changes. The new updates will also require the assignment of risk rankings to all vulnerabilities discovered during vulnerability scans, and evidence that all ‘high’ risk vulnerabilities discovered during scans are resolved.

“Enterprises therefore need to evolve their standards and audit requirements to reflect this. By taking a unified security monitoring approach with active scanning and log-correlation enterprises can watch traffic in motion, in real-time, placing them ahead of the game when it comes to noticing anomalies and ‘high’ risk vulnerabilities.

“Compliance thereby becomes an after-effect of a combination of good vulnerability management coupled with a strong configuration and event management strategy.”
Bookmark and Share
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
   © 2012
Netgains Logo