18/02/2010 -
With the requirements of payment processing security changing constantly, it can be difficult for merchants to keep up. Yet the consequences for not keeping up can be catastrophic - payment processing breaches can be tremendously expensive and cost a business its reputation.
As a result, small and midsize businesses - which often have less time and resources to devote to payment processing security maintenance -may want to consider deploying an automated IT Governance, Risk and Compliance system, reported Multichannel Merchant magazine.
IT GRC systems can "help retailers manage the compliance process by 'rationalizing' the various PCI DSS compliance requirements so that effort is not excessive or duplicated," said the magazine. Small businesses "can implement PCI DSS compliance technology and programs to reduce the costs of compliance on a year-over-year basis," it added.
Another way for merchants to reduce the cost of compliance, experts say, is to limit the amount of data that is considered in-scope for the PCI DSS. By reducing the systems that process cardholder data, organizations will have fewer areas to protect and maintain.

We notice you are visiting from a U.S. Internet provider. 




