If you’re a shared hosting provider or a business using shared hosting, understanding the Payment Card Industry Data Security Standard (PCI DSS) requirements for shared hosting providers is vital to maintaining compliance and protecting sensitive data. In this guide, we’ll summarize insights on PCI Data Security Standard Requirements 1 and 2 and common compliance gaps. … Read more
Meeting PCI DSS requirements starts with understanding where your organization stands today. That’s where a PCI DSS gap analysis comes in. It’s a diagnostic process that pinpoints which controls are already in place, which ones are missing, and what actions are needed to achieve full compliance. If your organization stores, processes, or transmits payment card … Read more
In light of the recent news of the data breach at Anthem Blue Cross/Blue Shield, risk assessment is our theme today. We welcome this guest post from our partner, KirkpatrickPrice…. Performing a Risk Assessment is a critical component of any Information Security Program. It’s mandated by several frameworks (SSAE 16, SOC 2, PCI DSS, … Read more
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) is continuing its efforts to enforce HIPAA compliance through periodic and proactive audit programs. These audits are designed to assess how well Covered Entities and Business Associates are meeting their obligations under the HIPAA privacy, security, and breach notification standards. With … Read more
