Application Security, the Next Frontier of Compliance Application security is moving to the forefront Enterprises have gone to great lengths to improve information security and document compliance with regulations and industry standards like Sarbanes-Oxley, PCI DSS, HIPAA, FFIEC, FISMA and ISO 2700x. But one critical area is only now coming into focus: application security.

The Payment Card Industry Data Security Standard (PCI DSS) compliance is a set of specific security standards developed by the payment brands* to help promote the adoption of consistent data security measures that are needed to protect sensitive payment-card information. The standard applies to all organizations which hold, process, or exchange cardholder information from any [...]

It is not unusual for many small and medium-sized businesses to have several custom applications running in their environments. These applications range from customer facing websites, internal intranet web sites, windows applications, windows services, and small utility programs that run on a schedule. In a distributed environment these various custom applications all need access to [...]

The Payment Card Industry Data Security Standard (PCI DSS) requires minimum standards of security from any organization that handles payment cards or credit cards. The details of the security requirements vary with the size of the organization, but in each case, three steps are required. Risk Assessment Safeguards Implementation based on the Risk Assessment Vulnerability [...]