Global Banking & Finance Review: New PCI DSS Update Fails to Convey a Sense of Urgency for Security | Press Release

Global Banking & Finance Review: New PCI DSS Update Fails to Convey a Sense of Urgency for Security

Posted on August 23, 2022 | Cybersecurity , Data Security

In this Global Banking & Finance Review article, Donnie MacColl discusses the recent updates to PCI DSS V4.0 and asks if the timeframe for implementation is fast enough to raise the level of cyber protection needed by financial institutions today? 

Originally published in Global Banking & Finance Review.

Excerpt:

“Now that PCI DSS V4.0 has been announced, many financial businesses are getting ready to implement the changes it brings. Companies have two years to plan their implementation but must have everything in place by March 2025. The risk of working to this single deadline, however, is that it fails to create a sense of urgency and many of the security updates included in the new standard are best practices that businesses should already have established.

For instance, “8.3.6 – Minimum level of complexity for passwords when used as an authentication factor” or “5.4.1 – Mechanisms are in place to detect and protect personnel against phishing attacks” are listed as “non-urgent updates to implement in 36 months”. Considering the high level of cyber threat following events such as the Russian-Ukrainian conflict, this timeframe isn’t fast enough to raise the level of cyber protection needed by financial institutions and retail businesses today, posing a real threat to customer data and privacy.”

Read the full article here
 

Recent News
September 28, 2022
It’s difficult to control your Social Security number in the wild. In his September contribution to Forbes Advisor, John Wilson discusses the most common scams involving Social Security numbers and provides 8 steps individuals can take to prevent identity fraud.
September 22, 2022
Agari, Alert Logic, Digital Defense, Digital Guardian, and Tripwire, all by HelpSystems, were recognized in Expert Insights’ “Best-Of” Awards for Fall 2022.
September 20, 2022
Whether intentional or otherwise, the Insider Threat poses a serious risk to business. HelpSystems’ experts, Bob Erdman, John Grancarich and Tom Huntington highlight the risks in this Digital Journal article and describe the solutions organizations can implement to help prevent malicious actors.
September 20, 2022
Credence Security, a leading regional distributor of specialized solutions in cybersecurity, forensics, governance, risk, and compliance, has signed a distribution agreement with HelpSystems, a cybersecurity and automation software provider, to deliver their expansive portfolio across the UAE and wider GCC region.
September 16, 2022

In his article for Tech Native, John Grancarich simplifies Zero Trust, and provides 7 steps organizations can take to implement a Zero Trust architecture.