Not to make light of the gravity of the event, but here we go again – Consumers are subjected to another round of warnings about yet another credit card information breach! Unfortunately, these data breach warnings are in danger of becoming as common as the daily weather report. This time the source of the breach, which affects Visa and MasterCard credit and debit cards, has been laid at the feet of Atlanta-based payment processor Global Payments. Global Payments self-reported that unauthorized access into its processing system had indeed taken place earlier this year.
When A Credit Card Payment Processor Gets Hacked
April 3rd, 2012 | Posted by in Incident Response | PCI - (0 Comments)On Tokenization: Tokenization & Payment Channels
January 4th, 2012 | Posted by in PCI | Tokenization - (0 Comments)Implementing tokenization is much more about understanding how your organization interacts with payments than it is simply rolling out a device that will tokenize payment card data. Many tokenization solutions in the market today are a “silver bullet” and can remove your environment from PCI scope. Beware though, most solutions address only one piece of the tokenization puzzle.Read more
On Tokenization: Implementing Tokenization
December 27th, 2011 | Posted by in PCI | Tokenization - (0 Comments)Don’t be fooled. Implementing tokenization may not be as easy as they say. In fact, depending on your environment, implementing tokenization can be quite complex. For instance, if your company is a wholesaler and takes payments through multiple channels, implementing tokenization in all of those channels can be quite challenging.Read more
On Tokenization: Determining if Tokenization Is the Right Solution
December 21st, 2011 | Posted by in PCI | Tokenization - (0 Comments)How do you know if Tokenization is the right data security solution for your environment? Depending on how sensitive data flows throughout your environment, integrating a tokenization solution may not be the right solution. For instance, tokenizing a very small environment does not make sense if point-to-point encryption can provide the necessary means for data protection. Conversely, tokenization can drastically reduce, if not eliminate, a majority of your environment from PCI Scope.Read more
“What Keeps Me Up at Night” – EMR on the Internet
November 17th, 2011 | Posted by in Compliance | HIPAA | PCI - (0 Comments)Right now two things keep me from getting a good night’s sleep:
The first – the anticipation of whether we’ll experience another earthquake in Oklahoma.
The second – the explosion of transmittal of electronic medical records (EMR) across the Internet.
Read more






