Oct 31, 2025 · 3 min read · When customers share their payment information, they trust your organization to keep it safe. However, one small security window can lead to multitudes of breached information and lost reputation. This is where an expert PCI DSS certification consul...
Join discussion
May 30, 2025 · 6 min read · If you’ve ever had to write an app to process card payments, not like integrating PayPal, but like being PayPal. You’ve probably heard of PCI DSS. Payment Card Industry Data Security Standard (PCI DSS) is an information security standard for organiz...
JEmenike commented
Mar 16, 2025 · 3 min read · Introduction Encryption is a fundamental concept in cybersecurity that protects data from unauthorized access. When data is encrypted, it is converted into an unreadable format that can only be deciphered with a specific key. There are two main types...
Join discussion
Feb 2, 2025 · 6 min read · In today’s cloud-first environment, ensuring your AWS infrastructure is secure and compliant is more critical than ever. Manual audits simply can’t keep pace with the rapid growth and complexity of cloud resources. Steampipe—an open-source tool that ...
Join discussion
Jan 13, 2025 · 22 min read · This room covers the introduction to governance and regulation in cybersecurity, the understanding of relevant international laws, regulations, policies, standards & guidelines, the Governance, Risk Management & Compliance (GRC) framework, and intern...
Join discussion
Oct 2, 2024 · 10 min read · Introduction Welcome to Part IV of my Kubernetes series, where we delve into building compliant systems on Kubernetes to meet stringent regulatory standards such as PCI-DSS, POPI, GDPR, and HIPAA. As
Join discussion
Sep 21, 2024 · 10 min read · Recently, at Ola, the Sentinels team, that is the security team in Ola, was asking us, the Core Infrastucture team, to help with getting Logs 🪵 for many things for a PCI Audit PCI - Payment Card Industry. PCI is a compliance. I think it’s called PCI...
Join discussion
Dec 9, 2023 · 7 min read · Logging mechanisms and tracked user activities are critical to preventing, detecting, or minimizing the impact of a data compromise. Implementing logs on all system components and in the cardholder data environment (CDE) allows thorough tracking, ale...
Join discussion
Dec 8, 2023 · 7 min read · While many organizations may prioritize the digital security measures needed to protect cardholder data, physical securities shouldn’t be forgotten. All physical access to cardholder data (or systems that interact with it) must be restricted to ensur...
Join discussion
Dec 7, 2023 · 8 min read · PCI DSS Requirement 8 provides detailed guidance on the two fundamental principles for identifying and authenticating users: establishing the identity of a person through an identifier, and verifying the identity of the user. The first principle is ...
Join discussion