IMGCAP(1)]
The Payment Card Industry Security Standards Council last week released a free guide to promote adoption of the Payment Card Industry Data Security Standard among merchants not yet compliant with the standard, according to the Wakefield, Mass.-based council. The guide, titled "Prioritized Approach," includes six security goals designed to help merchants identify high-risk targets and to understand common language used for security-standard implementation, states the council. "The Prioritized Approach framework will help stakeholders understand where they can act to reduce risk earlier in their journey toward PCI DSS compliance," says Bob Russo, general manager of the council. The council created the guide after evaluating actual data compromises, feedback from qualified security assessors and forensic investigators, and input from the council's board of advisors. The guide is available on the council's Web site and includes an informational document and worksheet. The council also is holding a merchant-security training course April 6 and 7 in Chicago.
