About
Many of you have recently been added to our PCI, Compliance, Security and GRC newsflash. This is informational news on the latest changes to PCI regulations and other IT Governance updates that we will be providing to all of you periodically.
|
| PCI SSC Issues Updated Self Assessment Questionnaire
|
In February 2008, the PCI Security Standards Council issued a new Self Assessment Questionnaire (SAQ).
The new version of the SAQ i.e. version 1.1, is notably different from its previous version in the sense that it is specifically designed to assist merchants and service providers in assessing their compliance with the PCI DSS.
|
| Requirement 6.6 Code Reviews and Application Firewalls Clarified
|
Threats to cardholder data are very common. Hence, PCI DSS through its Requirement 6.6 provides two alternatives that particularly address these threats, and help ensure that any input to web applications from untrusted environments is scrutinized before being accepted.
[More]
|