SecurityMetrics PCI Guide Breaks Down 3.2 Compliance into Easy Steps

Compliance guide shows forensic predictions and gives tips on getting compliant

News provided by

May 03, 2016, 08:07 ET

OREM, Utah, May 3, 2016 /PRNewswire/ -- Many businesses still don't realize how they can become vulnerable to attacks. According to SecurityMetrics' latest forensic data, the average merchant, at the time of data compromise, wasn't compliant with at least 47% of the PCI DSS requirements.

The SecurityMetrics 2016 Guide to PCI DSS Compliance was designed to show forensic predictions for 2016, what businesses are doing wrong in PCI DSS, the latest updates about PCI DSS 3.2, and how businesses can address each PCI requirement and become compliant.

"It's often the small, simple, easy-to-correct things that go unnoticed, which creates the vulnerability leading to data compromise," says VP of Assessments Gary Glover. "Therefore, it's important to create a year-round PCI compliance and security culture."

The guide tackles forensic predictions that spotlight specific threats to businesses. It also addresses the fact that many companies were vulnerable for a long time before they were breached (an average of 1,133 days).

A few predictions of the Forensic Team includes:

Insecure remote access will continue to be a problem
Large scale breaches will decrease, but humans remain high-risk
EMV will change breach methodology

The guide also goes through the 12 PCI requirements, and gives tips on how achieve compliance with each requirement. It even includes comments from QSAs and individual checklists that provide needed information to reach compliance. It also gives details on PCI DSS 3.2 and what business should expect with the updates.

Download the 2016 SecurityMetrics Guide to PCI DSS Compliance: http://info.securitymetrics.com/pci-guide

To learn more about SecurityMetrics or PCI DSS 3.2, contact 801.705.5665, email [email protected], or visit www.securitymetrics.com/pci.

About SecurityMetrics (www.securitymetrics.com)
SecurityMetrics protects electronic commerce and payments leaders, global acquirers, and their retail customers from security breaches and data theft. The company is a leading provider and innovator in merchant data security, and as an Approved Scanning Vendor and Qualified Security Assessor, has tested over 1 million payment systems for data security and compliance. Among other things, SecurityMetrics offers PCI level 4 compliance programs, PCI audits, mobile device vulnerability scanning, penetration testing, and forensic analysis. Founded in October 2000, SecurityMetrics is a privately held company headquartered in Orem, Utah, USA.

Logo - http://photos.prnewswire.com/prnh/20140225/SF71790LOGO

SOURCE SecurityMetrics