CC Image


                                  


                       PCI NewsFlash        May 2008
About

Many of you have recently been added to our PCI, Compliance, Security and GRC newsflash. This is informational news on the latest changes to PCI regulations and other IT Governance updates that we will be providing to all of you periodically.
 
PCI SSC Issues Updated Self Assessment Questionnaire

handshake In February 2008, the PCI Security Standards Council issued a new Self Assessment Questionnaire (SAQ).

The new version of the SAQ i.e. version 1.1, is notably different from its previous version in the sense that it is specifically designed to assist merchants and service providers in assessing their compliance with the PCI DSS.

Requirement 6.6 Code Reviews and Application Firewalls Clarified

creditcard swipeThreats to cardholder data are very common. Hence, PCI DSS through its Requirement 6.6 provides two alternatives that particularly address these threats, and help ensure that any input to web applications from untrusted environments is scrutinized before being accepted.

[More]
 
Please let us know incase of any suggestions you may have. Also, please feel free to forward this to other people in the industry for signup as well.
In This Issue
Updates on PCI SAQs...
PCI Requirement Code Reviews...
Featured Article
Quick Links
creditcard swipe
Approved Scanning Vendor
ControlCase is an Approved Scanning Vendor (ASV) for the Payment Card Industry (PCI) ....[More]