What You Need to Know From the Cybersecurity Act of 2015: Part One
January, 2016, Rick Link, Managing Director
On Dec. 18, 2015, President Obama signed into law an omnibus spending bill that included the Cybersecurity Act of 2015 (“The Act”). The Act was a compromise of cybersecurity information sharing bills that passed the House and Senate earlier in 2015. It creates a voluntary process for sharing cybersecurity information and is intended to encourage public- and private-sector entities to share cyber-threat information. The Act is controversial, as the active sharing of information between and among the Federal Government and private sector entities does not currently occur routinely or effectively.
PCI Council Gives Merchants Reprieve on PCI 3.1 Updates
January, 2016, Shawn Shifflett, CISSP, QSA, Senior Practice Director, PCI
The Payment Card Industry Security Standards Council (PCI SSC) released an update to its vulnerability standards and is giving merchants until June 2018 to migrate their security protocols, even though waiting is not recommended.