Summing It Up listing page

By
Picture of Justin Bonk, CISSP, PCI-QSA, CIA, CISA, CIPP/US

Justin Bonk, CISSP, PCI-QSA, CIA, CISA, CIPP/US

Senior Manager, Freed Maxick Risk Advisory Services
PCI Compliance Guide: Determining your Organization’s PCI Compliance Requirements

An Introductory Guide for Company Executives New to the World of PCI Compliance You’ve just received notification that your organization needs to become PCI compliant. Fantastic – but what...

Continue Reading
PCI Compliance for Third-Party Service Providers: Monitoring and Managing Requirements

The Most Overlooked Component of PCI Compliance Achieving and maintaining PCI (Payment Card Industry) compliance is a challenging endeavor for even the most seasoned of IT professionals....

Continue Reading
Employee Benefit Plan Cybersecurity Considerations

In April of 2021, the Department of Labor’s Employee Benefits Security Administration (EBSA) issued guidance for plan sponsors, plan fiduciaries, plan service providers, and plan...

Continue Reading
PCI DSS 3.2 Req 6.4.6 - Views on Updating PCI DSS Compliance Programs Upon Significant Changes to a Cardholder Data Environment

If you are classified as a merchant or service provider, anytime you make a significant change to your cardholder data environment, you are required to ensure that all relevant PCI DSS...

Continue Reading
PCI DSS 3.2 Req 10.8 and 10.8.1 - The Process for Detecting, Reporting, and Responding to Failures in Security Mechanisms

If you're classified as a service provider you need to implement policies and procedures, and response mechanisms for addressing any failures in critical security mechanisms including...

Continue Reading
PCI DSS 3.2 Req 12.4.1 - Views on Establishing Responsibility for the Protection of Cardholder Data

If you're classified as a service provider, you are required to formally establish the overall responsibility for PCI compliance and the protection of cardholder data. Your PCI DSS Charter...

Continue Reading

Stay up to date