Defending PCI: ‘Don’t Blame the Qsa’s’

Interview with Bob Russo, GM of PCI Security Standards CouncilSince the announcement of the Heartland data breach in January, the merits of the Payment Card Industry Data Security Standard (PCI DSS) have been questioned, and Bob Russo has led the defense. Russo is general manager of the PCI Security Standards Council, the group responsible for the development, management, education and awareness of the PCI Security Standards. In an exclusive interview conducted at the council’s recent community meeting in Las Vegas, Russo discusses: Why end-to-end encryption is no security panacea; The merits of tokenization, Chip and PIN and other solutions; His response to breached entities that say they were PCI compliant.

See the original post:
Defending PCI: ‘Don’t Blame the Qsa’s’