Retail InfoSec - Latest Comments

Re: Interesting Posts Summary

Home Security — Mon, 29 Aug 2011 04:26:57 -0000

Oh, I learned a lot from your summary.

Re: Interesting Posts Summary

Nancy Compass — Thu, 21 Jul 2011 02:15:04 -0000

That's so great indeed !
Home Security
Dallas

Re: Interesting Posts Summary

Home Security Riverside — Tue, 05 Jul 2011 00:02:20 -0000

Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You clearly know what youre talking about, why throw away your intelligence on just posting videos to your blog when you could be giving us something enlightening to read?
Home
Security Riverside

Re: Interesting Posts Summary

dancilhoney — Mon, 30 May 2011 20:29:51 -0000

missouri security services especially retail services provides a high quality product. I have found them to
be prompt and flexible in their scheduling.

Re: Our Dog Larry

Nina — Tue, 29 Sep 2009 10:31:53 -0000

I never knew you posted this... I miss Larry.

Re: PA-DSS and ‘Enforcement’

Element Payment Services — Thu, 06 Aug 2009 16:48:51 -0000

Payment Card companies, as evidenced by MasterCard's recent fine/penalty announcement, are likely to enforce PCI compliance with increasing frequency. As PCI DSS and PA-DSS continue to evolve, especially through the feedback stage(s), compliance is more important than ever.

If you want to test your PCI knowledge in a fun way, try our PCI Compliance Quiz Widget. Not only is it fun, but it's fully portable too. If you like it, just cut and paste the included script and host it at your website or blog (yes, for free).

Thanks, Alex...keep up the great work.

Re: PA-DSS and ‘Enforcement’

alexcrittenden — Mon, 15 Jun 2009 21:38:41 -0000

Thanks Steven -
although my thoughts tend to lead back to the merchant bearing the brunt of any breach situation given the way that PA-DSS is structured. The vendor needs to provide a PA-DSS compliant application and the instructions on how to implement it in a secure manner; however, if the merchant changes the configuration post-install or installs it themselves and doesn't follow the implementation guide the merchant is back on the hook...

In some ways it may be like PCI-DSS is now - changing systems and changing environments (and just the fact that the environments are so complicated) make it very easy to fall out of compliance - constant attention is required for the merchant. If there were a breach situation, I wonder if the vendor couldn't find something in the merchant environment that wasn't correct....

Re: PA-DSS and ‘Enforcement’

Steven Hughes — Mon, 15 Jun 2009 15:54:07 -0000

Hi Alex,
Great Blog post. I would also add, it probably won't be long before some of the bigger payment gateways and card companies start going after payment application vendors when they find a security breach was caused by an application. If these companies don't properly enforce the PA DSS, it will make it that much harder for them to collect money lost because of a breach.

Re: Template change

AC — Thu, 11 Jun 2009 20:14:19 -0000

Test comment on the new template and a note to explain that I'm apparently not done with the needed updates....