Skip to main content

The WiKID Blog

Viewing posts tagged Security and Economics

networkworld-on-pci-conflicts-of-interest

NetworkWorld has an article on the potential for conflicts of interest in the PCI world. In sum:

  • There are only 60 qualified security assessors (QSAs).
  • Many QSAs also sell products.

new-incentives-for-pci-compliance-from-visa

Visa's CEO hinted during a keynote speach that Visa may be looking at increasing incentives for PCI compliance.

Coghlan’s reference to incentives for compliance with the Payment Card Industry data-security standard follows a year that saw major hacker breaches of databases containing sensitive card information, including PINs for debit cards. “We need to do a better job with data security,” Coghlan said.

new-non-profit-educational-discounts-plus-pay-what

Today we announced a new pricing program for home users: pay what you want. This variable payment plan for home users is based on the recent bands that have tested this system (Radiohead and NIN). But the trigger was also the free for home use offer for SSL-Explorer>. I have, of course, seen a lot of free for home use enterprise software and we may yet go there. But I also believe that this should be an interesting experiment.

open-source-momentum-and-spending-during-the

Hat Tip: Slashdot, From ComputerWorld:

problems-with-the-pci-security-standard

Mark Curphey has some thoughts about the problems with the PCI security standard and it looks like he is just getting started. I would like to also point out a comment left by an anonymous poster (probably because he or she makes a living doing PCI audits) in a previous post on PCI:

The problem with the Visa PCI standard is that Visa/MC have a vested interested in keeping the business flowing. The entity that is responsible for answering Visa is the issuing bank. The retailer is responisible to the issuing bank. The reports are filed with the issuing banks and shared with Visa. The problem with this structure is that all parties have a financial interest in keeping the business flowing. It takes a serious public violation, like card systems, for Visa/Issuing Banks to drop a vendor.

Recent Posts

Archive

2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom