Did you hear about that breach of health data in Hartford? A backpack was found on the street with health information of about 400 Connecticut residents. Turns out, the backpack belonged to an employee of the 3rd party call center (or as we say in PCI land – a SERVICE PROVIDER!). Just another reminder to put your service providers through the ringer every chance you get! This should include careful consideration of the value of using level 1 assessed service providers, those who complete a SAQ, and those who you attempt to include in your own assessment.
Ad below this line.