In this informative blog, McAfee experts weigh in on the processes, legislation, and requirements that affect every company’s risk and compliance posture. From audits to reporting, this blog helps you keep up to date on issues and advancements, and informs you of the latest McAfee risk and compliance product updates.
Registered users logged in to the social site and saw the personal contacts and messages of other users instead of their own. But the glitch only happened when users were coming in through AT&T.
Tags: Data Protection, facebook, passwords, Risk and Compliance
Study reveals passwords consumers and retail employees choose are obvious and either written down or repeated ad nauseam.
Tags: Data Protection, password security, passwords, retail, Risk and Compliance
Bob Carr, the CEO of Heartland Payment Systems, which suffered one of the largest breaches in history, was quoted in SC Magazine as saying “The audits done by our QSAs were of no value whatsoever.” Ouch! SC Magazine points out what we’ve seen in the last year that CIOs that start with a mind-set to understand the risk in Read more…
Geolocation presents new nightmares about protecting data.
Tags: Data Protection, mobile security, privacy, smartphones
T-Mobile reminds us of how serious the internal threat can be, in what U.K. authorities are dubbing one of the biggest data breaches in that region’s history.
Tags: Compliance, data breach, Data Protection, PCI, T-Mobile
What is out-of-scope related to PCI and who decides?
Tags: Compliance, Data Protection, PCI
PCI rules are designed for payment cards, but the same common-sense security guidelines will also dramatically help security in other areas.
Tags: Compliance, data breach, Data Protection, malware, PCI, Risk and Compliance
Recently the PCI Security Standards Council released an FAQ that mentions how “application whitelisting” can be used as a compensating control for antivirus under some situations. The exact text of the FAQ is: “The Council is looking for equivalent controls that address malware and all types of threats referenced in Requirement 5, which are often Read more…
Are data breaches becoming less common, or is the media getting tired of reporting on them?
Tags: Compliance, Cybercrime, data breach, Data Protection, PCI
There is no shortage of advice on how to prevent a data breach, but what if you become a victim of a breach? Do you have a plan of precisely what to do next? While very few retailers do, I’ll offer some suggestions.
Before we delve into what you should do next
Tags: Compliance, data breach, PCI, retail, Risk and Compliance, TJX
Posts in Risk Compliance