Managing the PCI Compliance of 3rd Party Vendors

blog, Compliance Management, Compliance Monitoring Software, Risk Management

Third-party compliance issues can be a nightmare if you don’t do your due diligence (say that five times fast!). The truth is that there is still a lot of confusion when it comes to what third-party service providers are specifically required to be compliant with, but ensuring that compliance is your responsibility if you’re going to deal with them.
To keep your own business safe from costly compliance violations, you must check out and validate the third party service providers (TPSPs) you do business with.

Saying Goodbye to SSL and TSL

blog, Compliance Monitoring Software, Data Security & Privacy Compliance, Risk Management

Winston Churchill once said “To improve is to change; to be perfect is to change often”. Some might argue that we’ve taken that idea to the extreme and decided to be a society under constant change, in which case we should listen to Mr. Churchill’s further thought, that “There is nothing wrong with change, if it is in the right direction”.
In the case of security and compliance, that constant progress is definitely a good thing. The more secure customer and company data can be kept, the better. Keeping products safe and in good shape along supply lines is also good.