• Home
• Topics
• Regulatory Compliance
• Avoiding conflicts of interest in PCI security assessments

Avoiding conflicts of interest in PCI security assessments

Section 2.2 of the PCI Validation Requirements for Qualified Security Assessors (QSA) v. 1.1 calls for "auditor independence" within the QSA program precisely to avoid the type of conflict of interest that you are worried about. In discussing this issues with others in the industry, it is generally accepted that policies be put into place that mandate a separation of duties between QSA Auditors and QSAs, or other individuals within a QSA certified company who provide remediation support.

Dig Deeper

This was first published in June 2007

More from Related TechTarget Sites

• Security
• Cloud Security
• IT Channel
• Networking Channel
• Systems Channel
• Storage Channel

• Security

  • PCI Council urges P2P encryption for mobile payments

    A PCI Council guidance document requires merchants to use a validated PIN entry device or secure card reader to accept payments using mobile devices.

  • Steve Lipner on the Microsoft SDL, critical infrastructure protection

    Microsoft’s senior director of security engineering says core SDL principles should be at the foundation of critical infrastructure system protection.

  • Android security model doing best to enable mobile malware spread

    At Information Security Decisions 2012, Dan Guido put the mobile malware focus on the Android security model and Google’s mobile app vetting process.

• Cloud Security

  • Leveraging Microsoft Azure security features for PaaS security

    Organizations can boost PaaS security late in the game by implementing these stopgap measures.

  • Quiz: Understanding cloud-specific security technologies

    Think you understand cloud-specific security technologies as well as expert Joseph Granneman does? Test your knowledge with this quiz.

  • CSA launches cloud security certification initiative for service providers

    Plan calls for working with certification bodies, government agencies, as well as an independent CSA certification.

• IT Channel

  • Health care VDI projects in high demand

    Solution providers report that health care VDI projects are in demand and creating channel opportunities.

  • To the cloud: Solution providers offer cloud assessment, deployment services

    As more companies look to the cloud, IT solution providers find opportunities in guiding customers through cloud assessment and pilot project deployment.

  • Partner focus strengthens CA Technologies’ channel strategy

    CA Technologies is changing how it interacts with the channel and has launched a fresh partner program with a new portal that offers training and marketing support for partners.

• Networking Channel

  • Partners learn to sell telemedicine solutions

    Selling telemedicine solutions can be an opportunity for partner growth, but it comes with its share of technology and skill set challenges to overcome.

  • Think you can't make digital signage sales?

    When video wall technology was expensive it was hard to sell. But selling digital signage has dropped in cost and many companies are now eager to replace static signs.

  • Cisco Partner Summit 2012: Support services, cloud and mobility reign

    At Cisco Partner Summit 2012, Cisco continues its attempt to improve business by refocusing its channel partner strategy with support services, mobility and cloud announcements.

• Systems Channel

  • Providing shared availability with a cold spare server

    Solution providers can sell SMB customers a shared server chassis to rapidly ease server failure by providing a compatible cold spare server.

  • How BYOD can be an opportunity for VARs

    It may seem like BYOD squeezes VARs out of the purchasing cycle, but there are opportunities to take advantage of this trend.

  • V2V conversion using VMDK to VHD Converter

    If your VMware customers are interested in Microsoft Hyper-V, you can use the VMDK to VHD Converter tool to perform a V2V conversion and migrate VMs.

• searchStorageChannel

  • EMC confirms XtremIO acquisition

    Headlines: EMC confirms that it acquired flash array startup XtremIO, and Israeli publication Globes pegs the deal at $430 million.

  • The pros and cons of cloud backups for storage resellers

    In this interview, see the pros and cons of cloud backup compared with tape backup, as well as how storage VARs can take advantage of that to guide their customers in the move to the cloud.

  • HIPAA-compliant cloud storage services: Due diligence is key to survival

    To provide HIPAA-compliant cloud storage services, storage VARs and MSPs face many, grave regulatory requirements. Learn about the risks and get advice for performing due diligence.

• About us
• Contact us
• Site index
• Privacy policy
• Advertisers
• Business partners
• Events
• Media kit
• TechTarget corporate site
• Reprints
• Site map