« What Happens if Logs Aren't There ... | Main | Webcast: Log Management takes on FISMA Compliance »
ROI of PCI compliance
Interesting post here on the ROI of PCI Compliance - along with a good primer on ROI. We've got a few comprehensive ROI models over at LogLogic.com. While some companies build comprehensive business cases for PCI compliance, others recognize that more than anything, an effective compliance program is about recognizing that the data customers entrust them with deserves protecting.
Mike gets at the issue more directly:
Whoever invented ROI should be beaten with a stick. Actually, it's an important concept for business management, but for security - it doesn't work so well. So I read with interest, this piece on ROI for PCI compliance. But it leaves me wanting. Wanting what? Basically, I want the discussion to just go away. The major benefit of compliance is in not getting hacked? That's ridiculous. The benefit of compliance is in making your auditors go away and ensuring you won't end up like our friends at TJX, all over the front page with your dirty laundry bared for all to see. It's not about offsetting fines, it's about protecting the contract you have with your customer to protect their data. Strong security will give you compliance. If you just try to buy compliance, you will end up with nothing but a big crisis communications bill.
There are other ways of getting a return on your PCI investment. The most recent being Visa's program, effective October 1, 2007 where merchants can qualify for lower interchange rates for being PCI compliant.
Posted January 22, 2007 in LogMatters | Permalink
TrackBack
TrackBack URL for this entry:
http://www.loglogic.com/mt/mt-tb.cgi/125
November 2007
| Sun | Mon | Tue | Wed | Thu | Fri | Sat |
|---|---|---|---|---|---|---|
| 1 | 2 | 3 | ||||
| 4 | 5 | 6 | 7 | 8 | 9 | 10 |
| 11 | 12 | 13 | 14 | 15 | 16 | 17 |
| 18 | 19 | 20 | 21 | 22 | 23 | 24 |
| 25 | 26 | 27 | 28 | 29 | 30 |
Categories
Archives
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
- July 2006
- June 2006
- May 2006
- April 2006
- March 2006
- February 2006
- January 2006
- December 2005
- November 2005
- October 2005
- September 2005