PCI 2.0 Changes: The Good, The Bad And The Hashing
Written by Walter ConwayOctober 28th, 2010
IT and business executives reading PCI DSS Version 2.0—slated to be released Thursday (Oct. 28)—will notice that it focuses on clarifications and additional guidance instead of providing a lot of new requirements. There are, however, two "Evolving Requirements" that, together with several clarifications, may impact how many retailers approach PCI compliance. Rather than taking the entire document apart piece by piece our resident QSA, PCI Columnist Walt Conway, highlights five items that caught his attention, along with the implications of each for retail IT executives.
The short version: You can expect to spend more time at the beginning of your assessment, and some of the approaches and technologies you may recently have put in place may no longer make the grade.
This Story Is Only Available For Premium Subscribers. Click Or Login In Below To Read The Rest Of This Story.
Already a Subscriber? Login Here
Leave a Reply
Readers, specifically those who want to comment on a story:
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
I have strong reservations about the 'individual' certification and posting of that information for merchants. Can you imagine the potential employee poaching that might occur? The implications when competitors can look up how many are certified with each of their competitors? 
-Christine
