New PCI DSS Version 3.0 mandated
On January 2015, version 3.0 of the Payment Card Industry Data Security Standard (PCI DSS) came into effect, says Simeon Tassev, MD and QSA at Galix. The changes are progressive and the guidance reflects the changing business environment, increasing protection against emerging new threats. Among the new areas of focus are: mandated data flow mapping, additional guidance on mobile security, and the introduction of security controls for companies trading online.