PCI Council wants YOU to give it things to DO

How about enforcing PCI DSS?

Secure remote control for conventional and virtual desktops

Crusaders at the Payment Card Industry Security Standards Council have called for submissions into projects for 2015.

The council is responsible for PCI Data Security Standards (PCI DSS), a - to date - largely failed initiative to impose better credit card processing security by retailers.

A Special Interest Group is accepting proposals for its 2015 projects, to be presented at North American and European meetings ahead of council elections later this year. "Winners" are to be announced in November.

The group was developed by the payment card industry initiatives as a means to target security challenges within the payments sector.

Proposed topics for examination next year include "daily log monitoring", PCI DSS mainframe probes, network virtualisation, and certificate and crypto key guidelines.

Automated teller machines also deserve a look into, according to the group - perhaps given the resurgence of security research in the field that has uncovered evidence of ATMs being loaded with malware and the discovery of smaller and smarter skimmers.

'Pay at the Pump' petrol swipe slots should also be examined along with contactless payment vending machines that have popped up in recent years.

The less tangible suggestion of determining shared responsibilities for inter-related third party services was also proposed.

"Special Interest Groups enable the PCI community to unite across industries with the goal of providing additional guidance in the payment security environment," Council head Bob Russo said in a statement.

"By bringing together thought leaders from various backgrounds, we are able to cultivate real- world resources for merchants, banks, acquirers and any organisation that deals with sensitive payment card data."

Riveted readers can suggest lofty topics or attend the meetings at the PCI website. ®

New hybrid storage solutions

More from The Register

next story
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Google recommends pronounceable passwords
Super Chrome goes into battle with Mr Mxyzptlk
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
THREE QUARTERS of Android mobes open to web page spy bug
Metasploit module gobbles KitKat SOP slop
'Speargun' program is fantasy, says cable operator
We just might notice if you cut our cables
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
Snowden, Dotcom, throw bombs into NZ election campaign
Claim of tapped undersea cable refuted by Kiwi PM as Kim claims extradition plot
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
prev story


Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.