2018 North American PCI Community Meeting – Day Three Recap

Today was Day Three of the 2018 North American PCI Community Meeting. You can read my recaps of Day One and Day Two. Day Three was off to another exciting start. The keynote talk for the day was Jeff Skiles, the copilot from the "Miracle on the Hudson" flight. His talk was very engaging, and … Continue reading 2018 North American PCI Community Meeting – Day Three Recap →

2018 North American PCI Community Meeting – Day Two Recap

Today was Day Two of the 2018 North American PCI Community Meeting. Read my Day One Recap here. Today started off really exciting, with a keynote given by Eric O'Neill - a story about FBI spy hunting calling out the common thread of insider threats. This is an issue that is certianly picking up steam, especially … Continue reading 2018 North American PCI Community Meeting – Day Two Recap →

2018 North American PCI Community Meeting – Day One

Today was Day One of the 2018 North American PCI Community Meeting. Today was a bit slower content wise as we had to deal with checking into the conference, and allowing some folks to fly in this morning. The day included two keynote talks, a third presentation, and a chance to visit the vendor showcase. … Continue reading 2018 North American PCI Community Meeting – Day One →

What to look for in a QSA

This was originally posted as an INSIGHT for Wolf & Company, P.C. here. If your organization is new to PCI compliance, you are probably wondering how you should choose which QSA to work with. This decision is not one to take lightly, as there are nearly four hundred QSA Companies (QSAC), with an estimated one thousand … Continue reading What to look for in a QSA →

New PCI MFA Guidance

On February 9, 2017 the PCI SSC released a new Information Supplement Multi-Factor Authentication with the intent to aid Organizations in meeting Requirement 8.3. One interesting quote in the document’s Overview: While PCI DSS Requirement 8.3 does not currently require organizations to validate their MFA implementation to all the principles described in this guidance document, these principles may … Continue reading New PCI MFA Guidance →