PCI Scoping Guidance

Back on Friday December 9, 2016, the Payment Card Industry Security Standards Council (PCI SSC) released a new Information Supplement Guidance for PCI DSS Scoping and Network Segmentation. The purpose of this Supplement was to provide some clarification on how an Organization can implement network segmentation controls to minimize the scope of systems covered by … Continue reading PCI Scoping Guidance →

Updated PCI Card Production Standards

The PCI SSC has released version 2.0 of both the Card Production Logical Security Requirements and the Card Production Physical Security Requirements. Both documents are now available on the Document Library. Why should many of you be interested in taking a closer look at both documents? The documents start with a scoping definition: Logical: “All systems … Continue reading Updated PCI Card Production Standards →

Reducing Risk for Contactless Payments

This was originally posted as an INSIGHT for Wolf & Company, P.C. here The United States Secret Service (USSS) and the Payment Card Industry (PCI) Security Standards Council released a Joint Advisory Bulletin on September 8, 2015, titled “Mobile Payment System Vulnerability.” This bulletin addresses a growing trend in information theft related to contactless payments … Continue reading Reducing Risk for Contactless Payments →