WithoutFire | John Elliott's occasional thoughts on data protection

Tag: PCI DSS

Total 5 Posts

was tesco bank hacked?

I’ve read some pretty amazing articles and blogs in the last week that show quite a misunderstanding about how criminals steal money, how payments work and how the new General Data Protection Regulation would both punish Tesco Bank and simultaneously remedy all ills. Cyber security and financial crime is

Continue Reading

in memoriam requirement 1.3.3

It is rare for the DSS to get smaller, each version typically adds a few requirements based on lessons from forensic investigations of breaches of cardholder data. However, in the summary of changes from version 3.1 to version 3.2 published this week I noticed:

<br><
Continue Reading

pre-authorisation data (pci dss q&a)

Question: Is pre-authorisation data in scope of PCI DSS?

Answer: Yes.

There’s quite a bit of misleading information on the internet about the status of pre-authorisation data. As far as all the card schemes are concerned there’s no difference between pre-authorisation data and post-authorisation data. If you store,

Continue Reading