Read the Data Protection Recommendations of a Qualified Security Auditor

Attacks Grow More Sophisticated and Scope of Data Needing Protection Continues to Expand

More and more data held in the infrastructure requires protection. Trying to determine how much protection is enough is a chore, and maintaining different standards for different types of data increases complexity. Read this white paper with thoughts on the use of Payment Card Industry Data Security Standard (PCI DSS) regulations as a common yard stick.

The author had deep experience helping organizations review and correct that data protection controls, from years as a PCI Qualified Security Auditor (QSA).  In this paper, the author:

• Asserts PCI DSS provides concrete direction missing from other data protection regulation
• Anticipates typical implementation challenges, based on 30+ years protecting payment data
• Advises on best practices for applying the standard to non-payment data