PCI Perspectives by Dave Taylor

How PCI Leaders are Different from Other Merchants

Articles on Compliance Management

Compensating Controls = Quick Fix at High Cost: Taking "the Easy Way Out" to Satisfy PCI DSS Requirement #3 Carries its Own Risks
BY GARY PALGON, NUBRIDGES, INC.

Sensible Security: Are Staff A Security Risk, And Are You To Blame?
BY DAVID KELLEHER, GFI SOFTWARE

A Friendly Reminder: Compliance Does Not Equal Security
BY ARI TAKANEN, CODENOMICON

Learn To Avoid Data Fiascos, Or Risk New FSA Penalties
BY ALAN CALDER, IT GOVERNANCE LIMITED

Don't Let EFS Trick You: Tips On Recovering EFS-Encrypted Data When It Gets Lost
BY VLADIMIR KATALOV, ELCOMSOFT

Forecasting Compliance Strategies for 2009
BY DOMINIQUE LEVIN, LOGLOGIC

The Problem of Silos
BY SUMNER BLOUNT, CA, Inc.

Compliance in the Cloud: Part 2—The Industry Focus
BY JIM HIETALA AND MARK WILLOUGHBY, COMPLIANCE RESEARCH GROUP

Testing Times—Here's One Sure Route To Optimal Security At Minimum Cost
BY MARTIN VICKERY, SPIRENT COMMUNICATIONS

Cradle to Grave—Data Recovery 2.0
BY ALASTAIR MOLYNEUX, KROLL ONTRACK

Library

Impact Zones

Reduce the cost and complexity of compliance or audit programs and processes with UCF spreadsheets, which are broken down by individual areas of compliance, or Impact Zones. Each impact zone deals with one area of policies, standards, and procedures.

Acquisition of Technology and Services »
Audits and Risk Management »
Configuration Management »
Design and Implementation »
Human Resources Management »
Leadership and High Level Objectives »
Monitoring and Measurement »
Operational Management »
Physical and Environmental Protection »
Privacy Protection for Information and Data »
Records Management »
Systems Continuity »
Technical Security »
Complete UCF Bundle »

The Language of Compliance
View an alphabetized list of terms, their definitions, and/or the compliance documents which use the terms.
Compliance Glossary »

The Compliance Authority
Digital Magazine

So long to silos, PCI DSS, and much, much more...
» Get the latest edition here

Register now to receive:

	Notification of newly posted compliance articles
	Recent industry reports on compliance and risk management issues
	Vendor-neutral information on the latests developments in GRC
	Access to webinars on a variety of GRC topics
	Information about upcoming GRC events

Compliance Webinars:
IT GRC Information

Best Practices in Developing Security Policies and Procedure Templates: A Case Study in Using the ISO 27000 Series Model for HIPAA
MATTHIEU GORGE, VIGITRUST

Do Your IT Policies and Procedures Comply with Data Security Standards
MATTHIEU GORGE, VIGITRUST

Survive the Regulatory Tsunami with the Unified Compliance Framework and Spectra
DORIAN COUGIAS, NETWORK FRONTIERS

Implementing IT-GRC: Five Biggest Pitfalls in IT Governance, Risk & Compliance
SANJAY ANAND, SOX INSTITUTE

PCI Best Practices
DR. DAVID TAYLOR, PCI ALLIANCE

The Sponsored Compliance Surveys

Unified Compliance Framework / University of Delaware

Compliance Awareness
Program Survey »