Content by Tracy Kitten

Fighting Ransomware: Best Practices

Tracy Kitten  •  September 21, 2017

Adopting best practices for disaster recovery is the best way to prepare for ransomware attacks, says John Cloonan of Lastline.

Faster Payments Initiative: What's Next?

Tracy Kitten  •  July 5, 2017

Faster payments can help to make payments more secure, but they can also raise new security issues. How can those be mitigated? Ed O'Neill of the Federal Reserve provides an update on the activities of two task forces working on this and other issues.

The Evolving Cybersecurity Standard of Care

Tracy Kitten  •  April 13, 2017

Over the past year, fines levied by various regulatory agencies against breached entities have helped to shape and clarify what cybersecurity attorney Joseph Burton calls the cybersecurity standard of care - a standard for reasonable security that courts will turn to when determining liability and fault in the wake of...

A Look at PCI's New Requirements for POS Vendors

Tracy Kitten  •  September 30, 2016

In a video interview, Troy Leach, CTO of the PCI Security Standards Council, explains enhanced standards designed to help ensure that POS vendors can stay ahead of new attacks aimed at defeating encryption.

Could FTC Play Bigger Role in Card Security?

Tracy Kitten  •  March 14, 2016

The Federal Trade Commission's review of how nine qualified security assessors scrutinize merchants' PCI compliance could be a sign that more federal oversight of payments security is on the way.

How Cybercriminals Use Facebook

Tracy Kitten  •  March 2, 2016

A new report from researchers at RSA describes how cybercriminals are using social media, including Facebook, to not only network about their attacks, but also sell card data and other compromised consumer information. Daniel Cohen of RSA FraudAction describes the report in this video interview.

Should Banks Expect New Cybersecurity Guidance?

Tracy Kitten  •  February 12, 2016

How will federal banking regulators respond to growing criticism of the FFIEC's Cybersecurity Assessment Tool? A new FDIC publication leads some experts to believe no new guidance is forthcoming. Here's why.

Breach Investigations: Who's Accountable?

Tracy Kitten  •  January 20, 2016

A lawsuit filed against security firm Trustwave is raising questions about "PCI Professional Forensic Investigators" and how they are monitored by the PCI Security Standards Council. But experts say the onus is on companies, not the council, to ensure their security practices are adequate.

Top 10 Influencers in Banking InfoSec

Tracy Kitten  •  January 11, 2016

BankInfoSecurity announces its fourth annual list of top influencers, recognizing leaders who are playing significant roles in shaping the way banking institutions and financial services companies approach information security.

Visa's Perez on Why PCI Still Matters

Tracy Kitten  •  November 2, 2015

Even though the U.S. is migrating to the EMV chip, Visa is still stressing the need for merchants to comply with the PCI Data Security Standard, says Eduardo Perez, the card brand's senior vice president of payment risk, in this video interview.

PCI: 5 New Security Requirements

Tracy Kitten  •  May 27, 2015

Five best practices noted in version 3.0 of the PCI Data Security Standard will become requirements after June 30, with remote access and third-party risks the key focus - particularly for smaller merchants.

PCI: Retailer Security Failures

Tracy Kitten  •  April 6, 2015

Troy Leach of the PCI Security Standards Council says data security standards are not failing; they just aren't being applied continuously. And conformance with the Payment Card Industry Data Security Standard is just one piece of the puzzle.

FFIEC: New Threats to Banks?

Tracy Kitten  •  April 1, 2015

While several experts say two new cyberthreat alerts from the FFIEC are primarily designed to make sure that smaller institutions are mitigating ongoing threats, Shirley Inscoe of Aite says they could also be an indicator of new threats on the horizon.

PCI Issues Penetration Test Guidance

Tracy Kitten  •  March 30, 2015

Experts debate the value of new PCI guidance for how businesses should use penetration testing to identify network vulnerabilities that could be exploited for malicious activity. Does the new advice go far enough?

FFIEC to Prepare New Cyber-Risk Policy

Tracy Kitten  •  March 19, 2015

The FFIEC says it's taking several additional steps, including updating and supplementing its Information Technology Examination Handbook, to help banking institutions enhance their cybersecurity risk preparedness. Find out the details.