<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.9.2" -->
<rss version="0.92">
<channel>
	<title>SPIguard Inc.</title>
	<link>http://www.spiguard.com</link>
	<description>Security, Privacy &#38; Compliance Solutions</description>
	<lastBuildDate>Fri, 11 Jun 2010 20:49:57 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>Compromised Pin Entry Devices delisted</title>
		<description><![CDATA[PCI-DSS delists two compromised Ingenico Pin Entry Devices after found to have been used in skimming attacks.]]></description>
		<link>http://www.spiguard.com/blog/compromised-pin-entry-devices-delisted/</link>
			</item>
	<item>
		<title>PA-DSS &#8211; Things to remember</title>
		<description><![CDATA[Things to remember when starting a PA-DSS validation engagement.]]></description>
		<link>http://www.spiguard.com/blog/pa-dss-things-to-remember/</link>
			</item>
	<item>
		<title>Client Resources</title>
		<description><![CDATA[
SPIGuard Web Board
The web board (or portal) allows clients to communicate with their assigned QSA.

]]></description>
		<link>http://www.spiguard.com/resources/client-resources/</link>
			</item>
	<item>
		<title>Catherine&#8217;s new book</title>
		<description><![CDATA[Catherine, SPIguard CEO, has authored a chapter in a new book.]]></description>
		<link>http://www.spiguard.com/blog/catherine-the-author/</link>
			</item>
	<item>
		<title>PCI Validation Procedures for Service Providers</title>
		<description><![CDATA[Effective February 1, 2009, Visa will only require submission of an executed Attestation of Compliance Form and the “Executive Summary” section of the service provider’s Report on Compliance (ROC) to demonstrate PCI DSS compliance as a Level 1 service provider. Level 2 service providers will submit version D of the Self-Assessment Questionnaire (SAQ).
All materials must [...]]]></description>
		<link>http://www.spiguard.com/resources/pci-validation-procedures-for-service-providers/</link>
			</item>
	<item>
		<title>PCI Service Provider Levels</title>
		<description><![CDATA[Service providers are organizations that process, store, or transmit Visa cardholder data on behalf of Visa clients, merchants, or other service providers. Service provider levels are defined as: 



Service Provider Level
Description


1
 VisaNet processors or any service provider that stores, processes and/or transmits over 300,000 Visa transactions annually


2*
Any service provider that stores, processes and/or transmits less [...]]]></description>
		<link>http://www.spiguard.com/resources/pci-service-provider-levels/</link>
			</item>
	<item>
		<title>March 2010 CIPS-SIG Meeting</title>
		<description><![CDATA[The CIPS Vancouver Security SIG &#8220;wargames&#8221; meeting was held at Langara college. There were hacking presentations on browser vulnerabilities and cracking WPA.

The browser vulnerabilities presentation, by Travis Gamble and James Bayne from the Fraser Health Authority, covered the propensity of people to click on links in emails and using the Java VM and Metasploit to [...]]]></description>
		<link>http://www.spiguard.com/blog/march-2010-cips-sig-meeting/</link>
			</item>
	<item>
		<title>Wyndham hotels hacked</title>
		<description><![CDATA[Wyndham hotels, which also operates Days Inn, Ramada and Super 8 motels, reported another break in, resulting in customer card data and magnetic stripe data being stolen.

The break in occurred between Oct 2009 and Jan 2010 and affected an undisclosed number of company franchisees and hotel properties that Wyndham manages. The hacker was able to [...]]]></description>
		<link>http://www.spiguard.com/blog/wyndham-hotels-hacked/</link>
			</item>
	<item>
		<title>PCI Merchant Levels</title>
		<description><![CDATA[Acquirers are responsible for determining the compliance validation requirement levels of their merchants. All merchants will fall into one of the five merchant levels based on annual Visa transaction volume of that merchant. The transaction volume of a merchant is calculated based on the processing environment aggregate number of Visa transactions processed by a merchant [...]]]></description>
		<link>http://www.spiguard.com/resources/pci-merchant-levels/</link>
			</item>
	<item>
		<title>PCI Validation Procedures for Merchants</title>
		<description><![CDATA[Merchants must demonstrate their compliance by submitting the required documentation to their Acquirer. This documentation must be made available to Visa upon request. Compliance validation is performed at the merchant&#8217;s expense.
Level 1 Merchant:
The Annual PCI Questionnaire and Annual On-Site PCI Data Security Assessment must be completed by Level 1 merchants according to the PCI DSS [...]]]></description>
		<link>http://www.spiguard.com/resources/pci-validation-procedures-for-merchants/</link>
			</item>
</channel>
</rss>
