During the remediation phase, Security Compliance Associates will provide technical guidance and consulting on potential solutions and approaches required to meet the compliance requirements for PCI DSS. This includes consultation and advice for implementation of solutions, practices, documentation and logs that are necessary to obtain PCI compliance. The amount of effort for this phase is dependent on the findings in the Readiness Review Report.
Based upon our past experience, the institution will normally have ongoing questions related to specific solutions and development approaches while building the appropriate controls and security implementations into its systems and applications. During this phase, the PCI Team will provide support that can be used for periodic status calls or in-depth security related questions.



Microsoft yesterday issued 13 security updates that patched 22 vulnerabilities in Internet Explorer, Windows, Office and other software, including one that harked back two decades to something dubbed "Ping of Death."
Microsoft released 13 security bulletins, patching 22 vulnerabilities across its product line, including two critical updates affecting Internet Explorer and the Windows DNS Server. While Microsoft issued fewer updates this month, August was still marked as a busy month for system administrators.
Hackers flying the AntiSec banner today released what they said was 400 megabytes of internal data from a government cybersecurity contractor, ManTech, as part of their campaign to embarrass the FBI every Friday, as well as target other government agencies and their partners.
The U.S. Attorney's Office in Houston has brought charges against four men for stealing more than $400,000 as part of an ATM skimming scam targeting local banks.
Morgan Stanley Smith Barney is the latest company behind Sony and Epsilon to have its customers' personal data compromised.
A gang that made more than $72m (£45m) peddling fake security software has been shut down in a series of raids.



