Featured Blog

On March 12, 2014

PCI DSS 3.0 New requirements – Maintaining an inventory of system components in scope

This is a requirement for sub-control 2.4.  Inventory of systems refer to all hardware and software, virtual or physical within the cardholder data environment (CDE). This essentially means a list of all the hardware and software used, their purpose in being in the CDE, what they are and why they ...

On February 28, 2014

Hackers have encroached all areas. Way beyond mobile and wireless…

Hackers are "Hacking all the things". We are starting to hear about environments like thermostats, heating, ventilation, air-conditioning using web interfaces and http custom protocols.  Those are big security issues. Next, over the last several months there have been numerous cases of hackers ta ...

On February 26, 2014

Verizon 2014 PCI Compliance Report – Major revelations and suggestions

The 2014 Verizon report indicates that 9 out of 10 failed their PCI DSS baseline assessment. Here are some excerpts from the report:

• “Organizations that are breached tend to be less compliant with PCI DSS than the average of organizations in our resear ...
  Read More

On February 20, 2014

Lessons from recent data security breaches

There are many large data security breaches that are being reported nationally. They are high-profile retail chains. Equally important are the smaller breaches which are occurring every day. All that was required to find the smaller companies breach list was do a simple search on the Internet.  It� ...

On December 17, 2013

Retailers believe they are compliant if their POS vendors say so? If you are indeed compliant, is your data secure? Find out what you get in return on these investments.

Omega ATC has been releasing educational and informational emails all year long primarily on these two topics – “data security” and “compliance” emphasizing that compliance does not equate to security.   Through experience we have found that merchants find it hard to co ...