SecurityRatty: The "E" word

This is cache of http://www.rsa.com/blog/blog_entry.aspx?id=1294. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

The "E" word

2008-06-24 00:00:00 by Brad Davenport in Speaking of Security, the RSA Blog and Podcast

I met with a merchant this morning to talk PCI compliance. Like many of the conversations I've had with merchants, things got a bit more interesting when the discussion focused on cardholder data protection. They joked that the new rev of the PCI Standard, version 1.2 -- due out in October -- would eliminate the data protection requirements. All joking aside, the truth is that data protection isn't going anywhere when it comes to the PCI DSS. While there are other alternatives, such as hashed indexes, truncation and...