Comments on: Is PCI DSS Useless?

By: Business Plan Service

Business Plan Service — Thu, 10 Dec 2009 09:09:32 +0000

Hi,
It’s an interesting article. Thanks for sharing.

By: Security Nerd

Security Nerd — Mon, 08 Jun 2009 15:26:26 +0000

You hit the nail on the head, these controls need to regularly validated as still effective and/or still necessary along with identifying any new gaps and closing them. Even then, as long as you have the human element involved, you will have mistakes that could lead to security incidents. Keeps us in job though

By: Christian

Christian — Mon, 08 Jun 2009 09:03:06 +0000

A very well written article. This article here http://www.securityfocus.com/columnists/344 makes a very important point w.r.t the Letter of Engagement. Also worth remembering that a QSA verifies compliance with the standard and not that the entity being audited is actually secure.

By: uk_noodler

uk_noodler — Mon, 08 Jun 2009 08:55:35 +0000

Good analysis of PCI DSS. But you fail to mention that transactions cannot be anywhere near secure while Card Holder Not Present transactions give over all the information needed to make numerous other transactions.

Anyone working on the next generation payment solution?

BTW, captcha still timed out.