The recent stories circulating around the litigation between Genesco and Visa over PCI Compliance and a data breach shine a spotlight on some of the grey areas in PCI DSS. At the same time, there’s a spotlight on how retailers may misinterpret PCI DSS and what it means to them in reducing risk. The bottom line is that retailers can easily avoid the pain of a breach – and get rid of the PCI DSS challenge in a major way. However, what’s underneath this case hitting the front pages of the popular media? There are some unusual and conflicting issues around PCI compliance as reported so far, so it’s worth breaking this down for further investigation. As this case unfolds, we will no doubt learn more about what actually happened in this unfortunate data breach, but already there are lessons to be learned and more questions which need answer. Let’s take stock of the events:
- Mark Bower, Vice President, Product Management, Voltage Security
- InfoSecurity
- Posted On
