PCI DSS – Connect Converge

Why Tokenisation Beats Transparent Data Encryption for PCI DSS Compliance

Thomas GloerfeldSeptember 11, 202408 views

Cyber threats are rapidly evolving and breaches are on the rise. That makes compliance with the Payment Card Industry Data Security Standard (PCI DSS) ever more critical for organizations handling sensitive payment card data. A key aspect of this framework is safeguarding data at rest – but the requirements are changing. Disk- or partition-level encryption is no longer permissible to protect non-removable electronic media.

…

Helping BASE24 Customers Meet PCI DSS V4.0

KellyMarch 15, 20240187 views

From our market-leading card data discovery to our all new format-preserving tokenization, the Security Compliance Suite from HPE and 4tech Software has always focused solely on helping NonStop users meet their security and compliance obligations.

In 2010, we launched our first product, PANfinder, which, as the name suggests, is a payment card data discovery solution designed exclusively for the HPE NonStop platform and specifically for PCI DSS scope verification.…

GDPR 2021 – Compliance and Penalties; 3 Years Later

Steve TcherchianSeptember 21, 20210388 views

The General Data Protection Regulation, or GDPR, is a major piece of legislation adopted in 2018. It is designed to address the protection and responsible use of every European Union citizen’s personal data. However, GDPR is not an EU-only regulation. It affects ANY business or individual handling the data of EU citizens, regardless of where that business or individual is based.

Diagram Description automatically generated with medium confidence

PCI DSS 4.0 Is Coming. Will You Be Ready?

Steve TcherchianJune 15, 20210369 views

Since the release of PCI-DSS 3.0 in 2013, the PCI Security Standards Council has been quite busy. A little over a year after it was published, the council released PCI-DSS 3.1, followed by several new templates and supplements, including the “Migrating from SSL and early TLS Information Supplement” in April 2015 which highlighted the risks of SSL and TLS 1.0. The supplement described a migration plan as well as set a migration deadline of 1 July, 2016.

‘New Nacha supplementing data security requirements coming up’

Thomas GloerfeldMarch 23, 20210412 views

Nacha is a non-profit organization that convenes hundreds of diverse organizations to enhance and enable electronic payments and financial data exchange within the U.S. and across geographies. Through the development of rules, standards, governance, education, advocacy, and in support of innovation, Nacha's efforts benefit the providers and users of those systems. Nacha leads groups focused on API standardization, authors the Quest Operating Rules for EBT, and is the steward of the ACH Network, a payment system that universally connects all U.S. bank accounts and facilitates the movement of money and information. In 2020, nearly 27 billion payments and close to $62 trillion in value moved across the ACH Network.

End-to-End Cloud Data Security: Shouldn’t It Be a No-Brainer?

comforteSeptember 22, 20200274 views

Hardly a week goes by without news of a high-profile data breach. Sometimes, the damage is quite limited either due to the low market value of the apprehended data, the strength of the data security in place, or even the sloppiness of the threat actor...

Robust security strategy for your hybrid IT

Thomas GloerfeldJune 23, 20200308 views

What Is Hybrid IT? At its most basic level, hybrid IT is a blend of cloud-based and on-premises IT services. When applications and data were all maintained on-premises (or in-house) standardization was a best practise and security was much simpler. Now that the business and IT are realising the benefits of cloud services, hybrid IT is the common strategy. The new benefits of agility and flexibility brought by hybrid IT come at a cost… How do we keep these more vulnerable applications and data secure?