ISR News: PCI STANDARDS TRAINING
From The PCI Security Standards Council:
The two-day course entitled Standards Training, is designed to help merchants improve preparation for on site assessment, understand what is involved in creating their own internal assessment capability and establish an internal compliance program to help them sustain PCI DSS security practices and compliance when the assessment process is completed.
PCI Security Standards Council Issues Guide
From the PCI Security Standards Council:
“Securing cardholder data is the ultimate priority and following the PCI DSS is the best way to achieve this. The Prioritized Approach framework will help stakeholders understand where they can act to reduce risk earlier in their journey towards PCI compliance,” said Bob Russo, general manager, PCI Security Standards Council. “The launch of these new guidance and interactive documents are another step by the Council to increase understanding of and education around PCI DSS among merchants, providing them with insight into how they can protect card holder data faster and demonstrate progress and compliance with the PCI DSS.”
ISR News: PCI QSA Penalizes Assessors
Excerpts From SearchSecurity.com
San Jose, Calif.-based Payment Software Company LLC (PSC) and Frederick, Md.-based Fortrex Technologies Inc. were placed in remediation status, forcing the two companies to address issues discovered during a review of assessment documents or face losing certification. The PCI Council said qualified security assessor (QSA) organizations placed in remediation have violated QSA Validation Requirements. The requirements describe the qualifications a QSA must have to perform assessments.
ISR News: Microsoft Patch Tuesday
Excerpts From Cnet.com
Microsoft said Thursday it will release three security updates on this coming Patch Tuesday, including one that is rated “critical” and could allow an attacker to take over the computer. The critical update affects Windows 2000, XP, Vista and Server 2003 and 2008, the company said in an advisory.
