Thales, a communications security firm, has released results of a research study about the upcoming version of the Payment Card Industry Data Security Standards (PCI DSS). This new set of standards is expected to be released in October 2010 by the PCI Security Standards Council. Based on surveys with 155 qualified security assessors (QSAs), the following trends and key findings were identified:
- Encryption is one of the most effective means for achieving compliance but questions arise on how to treat encrypted data in audits. It is believed that clarifications will be issued on the use of encryption and key management.
- Forty-one percent of those surveyed believed tokenisation will be included in the update as the technology to use to increase cardholder data security and reduce cost of compliance.
- Tier 1 merchants are paying US$122,000 more on average than Tier 2 merchants to do the same QSA assessments.
The Ponemon Institute, an information-management think tank, designed the survey to focus on identifying trends, recommendations and preferences of QSAs involved in PCI DSS compliance. Specifically, the survey questions focused on the background, experience, client observations, expected changes in PCI DSS, preferences on how to achieve compliance, and typical client recommendations.
“Our research continues to validate that 60% of QSAs believe encryption to be the most effective means to protect card data end-to-end, and 41% of QSAs said that controlling access to encryption keys is the most difficult key management task faced by clients using encryption. It remains clear that QSAs consider encryption to be one the best techniques merchants can use to keep information safe and comply with PCI requirements. The current version of the standard, however, is ambiguous about how exactly encrypted data should be treated in audits, so QSAs seem to be confident that the October 2010 update to PCI DSS will provide clarity,” said Dr Larry Ponemon, chairman and founder of The Ponemon Institute.
A report by broking group Marsh examines the repercussions from the administration of the South Korean company, which filed for bankruptcy protection at the end of August.
Global research by C2FO suggests that smaller businesses are less concerned with the repercussions of Brexit and the upcoming US presidential election.
A squeeze on skilled talent means it now takes an average of seven weeks to fill open permanent roles in finance in the UK according to new research from financial services recruitment firm Robert Half.
Early-stage merger and acquisition deals in Asia-Pacific show nearly 10% year-on-year growth in recent months.