For CIOs of retail organizations, compliance with Payment Card
- Industry (PCI) standards is a top concern, as the costs of non-compliance-both from the penalties assessed and potential breaches that can result-are unacceptable.
- Organizations now face even broader requirements when the PCI Software Security Framework (PCI SSF) replaces the 15-year-old PCI Data Security Standard (PCI DSS) over the next three years.
- The new standard addresses new technologies that have come online, but still adheres to the same security principles that form the basis for PCI DSS.