PCI - News, Features, and Slideshows

News

• PCI DSS 3.0 went into effect Jan. 1. Are you in compliance?

  This vendor-written tech primer has been edited by Network World to eliminate product promotion, but readers should note it will likely favor the submitter's approach.

• PCI Council publishes risk-assessment rules for card-processing networks

  The Payment Card Industry (PCI) Security Standards Council today issued guidelines on how businesses storing, processing or transmitting payment-card information should look at doing an annual risk assessment.

• Survey on PCI: How it's impacting network security

  A survey of 500 information technology professionals with responsibility to assure compliance with the Payment Card Industry (PCI) security standard shows just over half find it "burdensome but necessary" in their organizations and about a third see it impacting their virtualized network environments in particular in the future.

• People, process limitations hamper x86 virtualization, IBM security expert says

  X86 virtualization is often a risky proposition for highly regulated, mission-critical applications, because people and processes are not ready for virtualization and the security risks it introduces, IBM security expert Joshua Corman argued at Interop Las Vegas this week.

• Companies get checklist on PCI security rules

  The organization that administers the credit card industry's data security rules has released a new set of compliance guidelines -- a move that reinforces the widespread perception that efforts to comply are going slowly at many companies.

• NEC's ExpEther extends PCI Express over Ethernet

  NEC is developing a system that can extend the conventional PCI Express interface found in most PCs and servers over standard Ethernet to distances of 2 kilometers or more.

• INTEROP: Knee-jerk standards compliance not enough for retailers

  Businesses certified to be compliant with the Payment Card Industry Data Security Standards (PCI DSS) keep suffering data breaches, but the problem may be more with the way businesses address the requirements than with the PCI standard, experts told an Interop gathering.