Re: Visa/PCI, care to spin-doctor this crap?

[halsey () royalgroupservices com]

As to risk transfer, a number of the security firms are offering merchant breach insurance bundled into the offering,  
They and the acquirers realize that a merchant can either apply a patch, install new routers, or even have a rogue 
employee so that true compliance with PCI-DSS is very difficult to maintain beyond the snapshots.  By doing this, if a 
merchant is breached when thinking that he was compliant, he is much less apt to be upset when he has a mechanism to 
pay for the forensics and fines.
Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: "James Ritchie, CISA, CISSP" <james_ritchie () sbcglobal net>

Date: Fri, 27 Feb 2009 11:16:49 
To: B.K. DeLong<bkdelong () pobox com>
Cc: Michael Hill, CITRMS<mhill () idtexperts com>; <dataloss () datalossdb org>; <gboyet () pcisecuritystandards org>; 
security curmudgeon<jericho () attrition org>
Subject: Re: [Dataloss] Visa/PCI, care to spin-doctor this crap?


_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

CREDANT Technologies, a leader in data security, offers advanced data encryption solutions.
Protect sensitive data on desktops, laptops, smartphones and USB sticks transparently 
across your enterprise to ensure regulatory compliance.
http://www.credant.com/stopdataloss
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

CREDANT Technologies, a leader in data security, offers advanced data encryption solutions.
Protect sensitive data on desktops, laptops, smartphones and USB sticks transparently 
across your enterprise to ensure regulatory compliance.
http://www.credant.com/stopdataloss