Just a random question from /r/pcicompliance. PCI Compliance – help with anti-virus, Firewall and Audit Logs Curious if anyone has affordable solutions for anti-virus software, firewall and audit logs. Trying to help two retail stores become compliant. They use a POS software (that is itself PCI Compliance). They have macbooks at each location to swipe…
I recently saw this press release and thought it illustrated the high level of confusion that exists about the security standards. I am going to remove their company name to try save them a little embarrassment. The bold comments are mine under excerpts from the press release. <<COMPANYNAME>> Announces PCI-DSS v3.1 Rating – The Highest…
PA-DSS has been updated to version 3.1. Read the council’s announcement here. This brings the PA-DSS in line with the PCI-DSS in terms of both version numbers and the update on “strong” encryption protocols. I.e: TLS 1.2 only please. And if you have read the council’s guidance on TLS migration that was published back in…
