Every company should have documented Information Technology policies and procedures to prepare them for regulatory requirements. However most organizations, particularly startup companies, do not have the time or expertise in drafting these very important documents.  

Read more.

In the Verizon Payment Security Report published August 31, 2017, there was an alarming statistic: 44.6% of companies fall out of DSS Compliance within nine months of validation. 

Read more.

 2018 is right around the corner, and that means there are some key deadlines approaching that could impact your organization’s PCI DSS compliance status.

Read more.

Payment aggregation is relatively new in the PCI world, and hasn’t had much exposure to the QSA community.  You may have run across some entities telling prospects and clients they have no PCI obligations for any transactions undertaken using their products.

Read more.