(ISC)² Blog

Integrity

As professionals, we focus a great deal on integrity, both professional/personal, as well as data integrity. However, I think the two are intertwined inexorably. But, that's a post for a different time. For now, about data integrity, particularly data feed integrity. I've asked business partners, colleagues, peers and vendors, and get the same answer, I don't think it's just me. Developers and system integrators have gotten so lazy and used to reliable communications, that it seems developers no longer consider data integrity components of value when developing their applications and reading/writing external resources. This, naturally, creates a ripe target for... Read more →

Merchant Level 2 SAQ or ROC

Anyone Got a Flash light? If you are a large Merchant 2 with a very public brand name, you may want to seriously think about getting a QSA to perform a full onsite assessment and ROC for you, especially if never done so before. You honestly have no idea the number and areas you have control and requirement gaps, trust me they are there. You’re better of doing your due diligence and going through the pain that first time and knowing where your control and security gaps are. For all you Merchant 2’s looking to self assess but not quite... Read more →