Feb 24, 2010
Yes, indeed. Just six weeks into the year, and the Payment Card Industry Security Standards Council (PCI SSC) has issued three clarifications regarding the storage of cardholder data on digital audio recordings. Now the PCI SSC has formally clarified that storing payment card data in digital call records is forbidden.
Read full post >
Feb 16, 2010
The Payment Card Industry’s Security Standards Council issued a clarification about audio recordings on January 22, 2010 noting that card validation codes and values must not be stored under usual circumstances to be considered PCI DSS compliant. PANs in the recording, of course, must be encrypted following the current standards as well.
Read full post >
Feb 08, 2010
Data Loss Protection or Data Leak Prevention (DLP) applications are often used to discover credit card and other personally identifiable information in enterprises. If you don’t know where sensitive data exists, how can you protect it?
Read full post >