pci dss Archives - Foster Institute https://fosterinstitute.com/tag/pci-dss/ Cybersecurity Experts Thu, 17 Dec 2015 22:12:28 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.4 https://fosterinstitute.com/wp-content/uploads/2021/02/Favicon.png pci dss Archives - Foster Institute https://fosterinstitute.com/tag/pci-dss/ 32 32 Be Secure or Be Compliant – Which Should You Do First? https://fosterinstitute.com/be-secure-or-be-compliant-which-should-you-do-first/ Thu, 17 Dec 2015 22:12:28 +0000 https://fosterinstitute.com/blog//?p=2236 If your organization meets requirements so that you are compliant with HIPAA, PCI DSS, SOC 2, or any other standard it does not mean you are secure. In fact, many organizations that are compliant are some of the least secure. Some executives, understandably, believe that meeting standards indicates that the organization’s network is secure. One […]

The post Be Secure or Be Compliant – Which Should You Do First? appeared first on Foster Institute.

]]> If your organization meets requirements so that you are compliant with HIPAA, PCI DSS, SOC 2, or any other standard it does not mean you are secure. In fact, many organizations that are compliant are some of the least secure. Some executives, understandably, believe that meeting standards indicates that the organization’s network is secure. One does not guarantee the other.

Being compliant: Might help you if you get sued for a breach
Being secure: You may not have a breach

Do both, but choose which one to do first.

If your customers or prospects want you to be compliant in order to do business with you, then compliance probably needs to be top priority. Otherwise, make your systems secure first.

The post Be Secure or Be Compliant – Which Should You Do First? appeared first on Foster Institute.

]]> IT Certifications are Critical, not Just an Option https://fosterinstitute.com/it-certifications-is-critical-not-just-an-option/ Thu, 15 Aug 2013 06:00:42 +0000 https://fosterinstitute.com/blog//?p=1632 Here’s why: Hackers are sophisticated. They constantly devise new ways to steal your valuable, confidential and proprietary information or destroy your business. Even if their intent is not to steal your data, they can infiltrate your computer systems for illegal purposes such as storing stolen financial data. They may even launch attacks against other organizations—and […]

The post IT Certifications are Critical, not Just an Option appeared first on Foster Institute.

]]> Here’s why: Hackers are sophisticated. They constantly devise new ways to steal your valuable, confidential and proprietary information or destroy your business.

Even if their intent is not to steal your data, they can infiltrate your computer systems for illegal purposes such as storing stolen financial data. They may even launch attacks against other organizations—and use your systems to do so (your lawyers may tell you that you are liable).

Therefore, IT professionals must—continuously—update their knowledge and skills in order to stay abreast of, and combat, the latest attack techniques.

Be sure IT Pros who advise you about IT security have earned the CISSP Certified Information Systems Security Professional (www.isc2.org/cissp).

If you ever have an IT audit, insist that the auditor possess a current CISA Certified Information Systems Auditor credential (www.isaca.org/cisa).

If your organization processes, stores, or transmits credit card or debit card data, then the PCI DSS Payment Card Industry Data Security Standard applies to your organization. Be sure you require anyone who assists you with PCI to have their PCI QSA Qualified Security Assessor qualification (www.pcisecuritystandards.org).

Insist that IT Pros who help you in any of these areas be certified: IT Security (CISSP), IT Audits (CISA), and PCI compliance (PCI QSA).

The post IT Certifications are Critical, not Just an Option appeared first on Foster Institute.

]]>