How do I make sure my business is cyber protected?
Cyber security is a topic on every organisation’s radar. The continued threat of ever evolving cyber-attacks, combined with the introduction of GDPR compliance means that there are serious businesses implications to successful attacks and the loss of data to any...
2-sec Exhibiting at the PCI Europe Community Meeting
Join 2-sec at the PCI Community Meeting in Edinburgh – 18-20 October What is PCI SSC? The Payment Card Industry (PCI) Security Standards Council is a global forum that develops, maintains and manages the PCI Security Standards, which include the Data...
Privacy Shield (ex. Safe Harbor), Here Come the Vultures!
You can almost feel it happening, can’t you? Every time there is an introduction of, or a change to some regulation or another, the vultures of the legal, security consulting, and even security product vendors spin up their marketing machines to invent new promises on...
Is Microsoft Azure PCI DSS Compliant? Lessons in due diligence….
I’ve been busy assessing a Microsoft Azure environment as of late, for PCI DSS purposes. So. I go here to download their AoC: https://azure.microsoft.com/en-gb/support/trust-center/compliance/pci-dss/ The date of the AoC is December 31, 2014, and a number of...