Blog

What’s new with PCI DSS 3.1?

We spend a lot of time dealing with the Payment Card Industry (PCI) Data Security Standard (DSS). This should come as no surprise, as for better or for worse, a lot of organizational security programs revolve around compliance with the PCI DSS. For those of you who aren’t PCI Qualified Security Assessors (QSAs), know that...

Continual compliance

So much has been written on security versus compliance and continual compliance that it seems at times that discussing it is beating a dead horse. That being said, it is a dead horse that needs to be beaten, as we continuously come across situations where organizations find themselves in a mad dash to get into...

The Importance of Documentation

There seems to be a fairly universal truth amongst information security folks: no one really enjoys creating documentation. This is unfortunate, as not only is documentation required by many standards, it can also help the organization run more smoothly. The documentation required by various standards tends to be fairly straightforward, and will be addressed in...

Why Perform a Risk Assessment with TrustedSec?

Too often organizations spend their security budget in ways that don’t necessarily make the most sense for them. Whether this be purchasing unnecessary appliances or securing an overly broad area, wasting valuable and often scarce security dollars isn’t good for anyone, except perhaps those providing the unnecessary services. A risk assessment, as the name suggests,...