Compliance or Security?
My friend Jesper Jurcenoks, CTO of NetVigilance, a firm that provides network vulnerability testing products, keeps me up to date on all the doings with various PCI (Payment Card Industry) security doings. At a recent PCI conference, JJ (easier than saying Jesper Jurcenoks, and a nickname he provides), heard a line in passing he wishes he came up with. I think I'll steal it from him.
View full article »
jfruh
Apple syncing patent can't come soon enough
pasmith
New Twitter features borrow from 3rd party clients
Esther Schindler
Open Source Changes the Software Acquisition Process
mikelgan
How to set up continuous podcast play on the new iTunes
David Strom
Five important Windows 7 mobility features
sjvn
Guard your Wi-Fi for your own sake
Sandra Henry-Stocker
Grepping on Whole Words
Sidekick: The Good News & the Bad News
Either way you look at it Microsoft Data Center management did not follow standards or best practices in this failure. In which case it makes me wonder more about the outsourcing of corporate data much less personal data.
- mburton325
Join the conversation here
Quick, practical advice for IT pros. Made fresh daily.
Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.
PCI compliance is not equal to acceptable security
Great article.I love venn diagrams and the visual for this article is a big circle called "Being Secure" and a smaller circle completely inside that one called "Being PCI Compliant".
Example: PCI section 6.6 says you can be compliant by running an automated external black box application scan. These won't even find all of the OWASP top ten vulnerabilities, and only about one sixth of the total types (not instances) of exploitable vulnerabilities that may be present.
PCI compliance is a good thing, but no one should believe it equals acceptable levels of security.
I would like to recommend to everyone.
Search-and-destroy Antispyware is an excellent scanner that I would like to recommend to everyone. I simply love it. In the past I have tried many different types of scans. Some of them were free and others cost quite a bit of money but they all seem to pick up the same types of bugs. The antispyware solution from Search-and-destroy is less expensive than most and it will clean your computer and keep it working great just like the more costly scanners. Click on http://www.Search-and-destroy.com to learn more about this scan and how it can help you protect your computer.replica bags
Women like jewelry replica bags as men like cars ,yet ,they are more crazy .They also like cloths ,but don't as much as replica handbags .Jewelry give more confident to them ,that why jewelry industries are so lucrative .