dss

Version 1.2 of PCI DSS, due out in October, requires 802.1x for wireless protection and antivirus for all operating systems, according to a summary of the changes issued Tuesday.

Data breaches at TJX and elsewhere have some questioning the effectiveness of PCI DSS, but others say the real problem is how companies approach the guidelines.

Layered defenses made PCI DSS compliance easy, but one expert sees a need for improved wireless standards.

Bob Russo, general manager of the PCI Security Standards Council explains that education is crucial to getting more merchants to comply with the standard.

Financial services practitioners say security standards like PCI DSS can be hard to heed, but that easing them would be a bad idea given the data fraud epidemic.

Last month, First Data CISO Phil Mellinger suggested that the PCI DSS rules should be relaxed and then gradually increased to give companies a chance to comply. He suggested some changes at a PCI DSS conference in New York City and is also calling for a PCI DSS compliance directory, listing compliant merchants as a [...]  read more »