Credit card transaction standard updated.

• Position: COMPLIANCE - Brief article

Version 3.0 of the Payment Card Industry Data Security Standard (PCI DSS) and Payment Activity Data Security Standard (PA DSS) became effective January 1, but organizations will have until at least December 31 to make the transition.

According to the PCI Security Standard Council, version 3.0 helps organizations make payment security part of their business-as-usual activities by introducing more flexibility and an increased focus on education, awareness, and security as a shared responsibility.

There has been some debate in the security industry about the effectiveness of the standard, particularly in light of major data breaches--such as the Adobe breach in October--by organizations that have been in compliance with the standard.

"Whatever your opinion, the new PCI DSS 3.0 appears to be moving from a security check box posture to a more holistic risk management approach," said Bernard Zelmans, general manager for EMEA at...