« Join me for a Compliance Week webcast! | Main | Herding Cats and The Art of the Compensating Control »

The Legal Risk around PCI

David Navetta published a fantastic article in this month's ISSA Journal entitled, "Who is Minding the Legal Risk around PCI" that takes a deep dive into the legal ramifications of not complying with the standard. If you do not get the journal, first off, go join the ISSA! It comes free with your membership!

In the meantime, jump over to David's blog to read the article! Towards the latter part of the article, David lays out two very real risks that I have discussed many times in this blog such as QSA shopping, rubber stamping, and scoping.

Enjoy, and have a great weekend!

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)