What Acquirers Need to Know About Ecommerce Security

PCI DSS v4.0 and the Evolution of the Self-Assessment Questionnaire (SAQ) for E-commerce Merchants

This blog takes a look at how e-commerce merchants can prepare for full PCI DSS v4.0 compliance, and urges them to work with their web and payment providers to confirm a number of aspects.

Read Now

Read Post

Why there’s no one-size-fits all solution to security maturity

The TechRadar article by VikingCloud Chief Product Officer, Kevin Pierce, discusses the need for a targeted and company-size-specific cybersecurity plan

PA-DSS Transformation to SSF

Learn the details of the new Secure Software Framework standard and why your organization needs to switch to the new standard to get assurance that applications being used are validated and protected.

How You Can Use Tokenization to Reduce PCI Scope

Describes how businesses should implement tokenization to reduce their scope when completing PCI DSS compliance.

Services and Solutions

Reliable connectivity solutions for every facet of your business.

How women in payments, fintech, and cybersecurity are breaking the glass ceiling?

This blog examines how women, including VikingCloud's Natasja Bolton, are breaking the glass ceiling in payments, fintech, and cybersecurity industries.

PCI DSS 4.0 - Summary of Changes

This blog article discusses the PCI SSC Summary of Changes document - a supplement to the new release of PCI DSS v4.0.

New “Backoff” Point-of-Sale Malware Alert

Looks at a POS malware which had low anti-virus detection rates

“How Do I Report a PCI Violation?”

We explain how you can report a PCI violation and what you need to know before you do so.

5 Security Tips for Small IT Teams

Cybersecurity attacks are increasing and maintaining security is becoming more difficult especially for small IT teams

Endpoint protection; a vital tool in the battle against ransomware

Learn about ever-changing and increasing cybersecurity threats, what is ransomware, and the benefits of endpoint protection as part of the risk management plan in place for your organization in this blog article.

LockBit Redux: Ransomware Gang Demands $80M, Leaks CDW Data

The InformationWeek article by Carrie Pallardy covers information technology products and services company CDW and their most recent cyberattack by LockBit

Distributed Denial of Service (DDOS) Attack – What can you do?

Learn more about the highly prevalent and dangerous Distributed Denial of Service attacks on organizations and how you can prevent them.

PCI DSS 4.0 - Self Assessment Questionnaires

This blog article takes a comparative look at the differences in the PCI SSC Self-Assessment Questionnaires

Cybersecurity Awareness Month – 7 Tips to Keep Your Organization Safe from Cyber Threats

During Cybersecurity month and year-round, keep your organization safe from cyber threats with our easy guide to the seven most common and dangerous threats.

Ensuring Penetration Testing Leads to Security

This blog article provides best practices for making sure your penetration testing strategy and framework is successful and compliant.

CISOs on alert following SEC charges against SolarWinds

TechTarget’s article by Arielle Waldman explores the growing pressure on CISOs for proactive cybersecurity measures in the wake of the SEC’s complaint against software company SolarWinds.

VikingCloud to take seat at PCI SSC Global Executive Assessor Roundtable

VikingCloud, a leading provider of cybersecurity and compliance solutions, can today announce that Michael Aminzade, its VP of

PCI DSS 4.0 - Implementing and Validating Requirements

This blog article provides a definition and explanation of differences in the PCI DSS v4.0 approaches for implementing and validating requirements – the defined approach and the customized approach.

Staying PCI DSS compliant as the global payment landscape evolves

Elevating security standards: A case study on sustaining PCI DSS Level 1 Compliance for Jula Holdings through proactive solutions and robust risk management.

Editor’s Note: Payment Card Industry Data Security Standard (PCI DSS) compliance and cybersecurity program Merchant Compliance Levels Definition

Both Visa and Mastercard have specific merchant category definitions for all businesses that store, process, or transmit card holder data. PCI DSS compliance requirements vary by merchant level.

The PCI Basics & Quick Guide

What Do Small Merchants Need to Do to Achieve PCI Compliance?

Connectivity Services

Reliable connectivity solutions for every facet of your business.

Microsoft Ending Support for Windows Server 2003

Microsoft recently announced that it is ending support for the Windows Server 2003 operating system on July 14, 2015.

PCI Security Standard Council Announces New SLA Timelines - Effective September 27, 2023

Find out how the PCI Security Standard Council’s new Assessor Quality Management submission timelines will affect your organization.

Cloud Security and Zero Trust

Discover how Zero Trust architecture can help organizations improve their breach detection and response in this blog article.

Serving Up Reliable Security

A U.S. based Restaurant Management Company chose VikingCloud for security and compliance management

The PCI DSS, Chaining and the Franchise Relationship

How the PCI DSS are assigned to chaining and a franchise relationship

PCI Compliance and the Service Provider

We look at the importance service providers must place on supplying stronger security to their customers

Small Business and PCI Cost vs. Benefit

Explains why small businesses need to comply with PCI DSS along side it’s costs and benefits.

A taste of how we delivered for the QSR Market

Streamlining operations and boosting security. VikingCloud helped a Quick Service Restaurant chain achieve PCI compliance and minimize internet downtime.

What in the World is a Qualified Integrator and Reseller?

Explains what a qualified integrator and reseller and why you may need one.

SEC Adopts New Rules on Cybersecurity Risk Management, Incident Disclosure, and Ransomware Payments by Public Companies

Discover the new rules regarding cybersecurity risk management, incident disclosure, and ransomware payments being adopted by the SEC in an effort to enhance cybersecurity transparency and accountability for public companies and foreign private investors.

3 Common Pitfalls to Meeting PCI DSS Compliance

We look at three of the most commonly identified issues when an organization is audited for PCI compliance by an external party. This article also offers some tips to avoid these pitfalls.

Finding The Cure for Swelling Cyber-threats

How a regional health care system leveraged VikingCloud to build a modern security strategy to help reduce new cyber risks

Will EMV Make You PCI Compliant?

Does introducing EMV to your business environment make you PCI compliant?

3 Generative AI Security Risks Retailers Should Beware of

The Total Retail article discusses the need to understand how cybercriminals are using AI to infiltrate systems, where common exposure points are located, and how to assess the supply chain for vulnerabilities.

The PCI Point-to-Point Encryption (P2PE) Program

Helps merchants understand becoming PC DSS compliance while using a P2PE system

How Can Your PCI Compliance Efforts Ultimately Save Your Business Money?

How making your data more secure by adhering to PCI guidelines can save your business money

Cyber Threat Unit Spotlight: Robin Divino

This Cyber Threat Unit Spotlight focuses on Robin Divino Security Tech Lead, Philippines.

THOR AI: Reducing Cyber Risk for At-Risk Businesses

Additional insight on VikingCloud’s first-of-its-kind,patent-pending, generative AI-powered cybersecurity chatbot.

In a comply-or-else industry, this payment solutions provider doesn’t just clear the bar, but surpasses the competition.

Compliance isn’t optional in the payment card industry—it’s mandatory. That’s why a Latin American-based payment solutions provider relies on VikingCloud’s extensive cybersecurity and compliance expertise to maintain its top-level cyber defense—and PCI compliance status.

ISO27001 vs. ISO27002

This blog article discusses the differences between ISO27001 and ISO27002 and the situations in which you should choose one versus the other.

Security Incident Preparedness - Tabletop Exercises

Learn more about tabletop exercises – simulated cybersecurity incident scenarios, and how they can help reduce security risks to organizations.

Penetration Testing

Our dedicated team will work with yours to help remediate and plan for the ever changing threat scenarios.

NIST Cybersecurity Framework 2.0: A Deep Dive into the New Governance Function

In today’s digital landscape, the need for robust cybersecurity practices has never been greater. With the rapid growth of cyber threats and attacks, organizations across all sectors constantly seek ways to bolster their defenses and protect sensitive data.

What's so scary about AI (Besides human extinction)

IT Brew reporter Billy Hurley delved into potential threats posed by AI following the release of AI Impact's International study that surveyed 2,778 AI researchers.

Spin the InfoSec Color Wheel - You Landed on Red!

This blog article details the concept of using the InfoSec color wheel to provide a clearer understanding of where an organization is and should aim to be – in a traditional security maturity model.

PAN Storage and the PCI DSS

We look at the basics of storing merchant’s PAN and how it can increase your businesses security risk

ISO 27002:2022

With the release of ISO 27002:2022, this blog article summarizes the changes, implications, and impact to your risk treatments if your ISMS is implemented or certified according to ISO27001.

PCI DSS v4.0 Compliance: 5 Key Reasons to Define Roles and Responsibilities

Discover why and how to ensure you know who owns what during a cybersecurity incident in this blog article.

3 Basic Ways to Avoid PCI Paralysis

Examines how basic defenses can prevent breaches and the importance of completing PCI DSS compliance to prevent this

How To Secure Your Software Supply chain

Learn the best practices of implementing a proactive cybersecurity posture and ensuring your software supply chain remains secure in this blog article.

You’re Non-Compliant with PCI. Now What?

Explains the best practices for merchants who are PCI non-compliant and the next steps they can take

5 Best Practices for Securing Your Small Biz

Outlines 5 best practices to secure your small business

Avoid Audit Fatigue - Using Automation to Create an Efficient Compliance Framework (and Stay Sane)

Learn how using automation can help combat audit fatigue and assist with compliance assessments in this blog article.

Proactive Data Security

PDS Shifts from do-it-yourself to a Managed Service.

PCI and storage of PAN

This blog article covers the details of merchant levels and compliance responsibility for entities who store, process, or transmit cardholder data.

How To Select A PCI Compliant Service Provider: Advice For Small Business Owners

Explains what small business owners need to consider when they are selecting a service provider

What’s the best practice for masking or truncating PAN data?

Explains the best practices for truncating PAN data

The Value of Powerful, Predictive and Cohesive Cybersecurity

The Value of Powerful, Predictive and Cohesive Cybersecurity Solutions for a Quick Service Restaurant Chain

Cryptography in the Face of Quantum Computing

Learn more about quantum computing advances, challenges, and impact on cybersecurity in this blog article.

The Top Generative A.I. Security Threats Facing the Restaurant Industry

The Modern Restaurant Management article by VikingCloud Chief Product Officer, Kevin Pierce, discusses how early adoption of A.I. has impacted the restaurant industry

Improving Security Awareness - Best Practices

Best practices for improving security awareness in your organizations

Managed Compliance Services

World Class Compliance and Risk Solutions.

Threat Hunt that Uncovered Novel Malware

What do you do when a required software program, recommended by a trusted member of your supply chain, comes inadvertently bundled with sophisticated malware?

PCI Forensic Investigator Services

Effective Incident Response can Reduce the Impact of Data Breach.

Demystifying PCI DSS requirements: Penetration & segmentation testing

Learn about the process, key terms used, and the requirements of penetration and segmentation testing to maintain compliance with Payment Card Industry Data Security Standard (PCI DSS) requirements in this blog article.

Ransomware in 2022 and beyond

We discuss the future of ransomware and detail the defense tactics for keeping your organization secure from cybercriminal tact

What is Endpoint Detection and Response?

Learn the details of Endpoint Detection and Response systems – what they are, what they do, and when organizations should utilize them in this blog article.

PA-DSS and PCI DSS: Beware the critical difference!

Explains the difference between PA DSS and PCI DSS

Introducing PCI DSS 4.0

This blog article summarizes the upcoming changes planned for PCI DSS v4.0 and what your organization needs to do to prepare a migration plan.

Ransomware actors ‘tighten the screws’ with legal and financial pressures

IT Brew’s article by Billy Hurley sheds light on ransomware threat actors’ evolving tactics that rely on more advanced financial and legal expertise.

What to look for in a PCI Forensic Investigator

Learn more about PCI Forensic Investigators including qualifications, how to select, when to engage, and avoiding common pitfalls of engagement in this blog article.

PAYSTRAX Selects VikingCloud’s Patented Web Risk Monitoring to Mitigate Merchant Fraud

VikingCloud, a leading global provider of cybersecurity and compliance solutions has announced a new client partnership for its

Integrating CVSS 4.0 into VikingCloud Penetration Testing

This blog discusses the upcoming changes and improvements in the new Common Vulnerability Scoring System (CVSS) version 4.0 and VikingCloud’s adoption plans for use in its penetration testing.

Asking around: What will the boardroom be talking about in 2024?

IT Brew’s article by Billy Hurley provides insight into what IT topic will be the most discussed in boardrooms in 2024.

Security Logging and Monitoring (PCI DSS Requirement 10): Why all the Fuss?

PCI DSS requirement 10 causes a lot of fuss, we aim to clear up why this requirement is in place

No Windows XP Support, No PCI Compliance?

Explains to merchants how still using Windows XP will affect their PCI DSS compliance

5 “Buts” Your QSA Doesn’t Want to Hear

5 excuses a QSA does not want to hear regarding a merchants PCI DSS compliance

Hardening Against Potential Attacks from Elevated Geopolitical Cybersecurity Risks

We have compiled a list of best practices from government cyber agencies and regulatory frameworks for organizations to help defend against nation-state backed cyber threats in this blog article.

VikingCloud Announces Industry’s First Generative AI-Powered Chatbot Combining Real-Time Cybersecurity and PCI Compliance Intelligence

VikingCloud today announced THOR AI (Threat Hunting and Orchestrated Response), a first-of-its-kind generative AI-powered cybersecurity chatbot.

How to Prepare for Heightened Board Involvement in Cybersecurity

The Security Management article by Claire Meyer discusses the U.S. Securities and Exchange Commission’s (SEC) new requirement for companies to disclose material cybersecurity incidents

PCI DSS v4.0: Authenticated Scans

This blog article details the PCI standard compliance requirements for conducting internal vulnerability scans via authenticated scanning.

Cyber Threat Unit Spotlight: Chesley Moodley

This blog takes a close look at the work VikingCloud's Cyber Threat Unit carry out and focuses in on Chesley Moodley

Read Now

Read Post

What Acquirers Need to Know About Ecommerce Security

3 Best practices to boost cybersecurity and reduce merchant risk.

VIKINGCLOUD NEWS & RESOURCES

High Availabilty Solution

PCI DSS L1 Bundles

Voice

Working with Multiple Compliance Standards

The 2019 PCI Compliance Annual Plan

PCI DSS v4.0 - Removal of 'In Place with Remediation'

VikingCloud welcomes Gabe Moynagh as new board advisor

5 steps to more effective penetration testing

How Do Cybercriminals Profit From My Stolen Data?

Cyber attackers and defenders are racing to up their AI game

P2PE – Don’t Lose Your Investment

PTS POI v3 Device Expiration: Are You Ready?

VikingCloud™ Achieves PCI Forensic Investigator Certification

PCI DSS 4.0: Multifactor Authentication

Cyber Threat Unit Spotlight: Jay Turla

PCI DSS v4.0 and the Evolution of the Self-Assessment Questionnaire (SAQ) for E-commerce Merchants

Why there’s no one-size-fits all solution to security maturity

PA-DSS Transformation to SSF

How You Can Use Tokenization to Reduce PCI Scope

Services and Solutions

How women in payments, fintech, and cybersecurity are breaking the glass ceiling?

PCI DSS 4.0 - Summary of Changes

New “Backoff” Point-of-Sale Malware Alert

“How Do I Report a PCI Violation?”

5 Security Tips for Small IT Teams

Endpoint protection; a vital tool in the battle against ransomware

LockBit Redux: Ransomware Gang Demands $80M, Leaks CDW Data

Distributed Denial of Service (DDOS) Attack – What can you do?

PCI DSS 4.0 - Self Assessment Questionnaires

Cybersecurity Awareness Month – 7 Tips to Keep Your Organization Safe from Cyber Threats

Ensuring Penetration Testing Leads to Security

CISOs on alert following SEC charges against SolarWinds

VikingCloud to take seat at PCI SSC Global Executive Assessor Roundtable

PCI DSS 4.0 - Implementing and Validating Requirements

Staying PCI DSS compliant as the global payment landscape evolves

Editor’s Note: Payment Card Industry Data Security Standard (PCI DSS) compliance and cybersecurity program Merchant Compliance Levels Definition

The PCI Basics & Quick Guide

Connectivity Services

Microsoft Ending Support for Windows Server 2003

PCI Security Standard Council Announces New SLA Timelines - Effective September 27, 2023

Cloud Security and Zero Trust

Serving Up Reliable Security

The PCI DSS, Chaining and the Franchise Relationship

PCI Compliance and the Service Provider

Small Business and PCI Cost vs. Benefit

A taste of how we delivered for the QSR Market

What in the World is a Qualified Integrator and Reseller?

SEC Adopts New Rules on Cybersecurity Risk Management, Incident Disclosure, and Ransomware Payments by Public Companies

3 Common Pitfalls to Meeting PCI DSS Compliance

Finding The Cure for Swelling Cyber-threats

Will EMV Make You PCI Compliant?

3 Generative AI Security Risks Retailers Should Beware of

The PCI Point-to-Point Encryption (P2PE) Program

How Can Your PCI Compliance Efforts Ultimately Save Your Business Money?

Cyber Threat Unit Spotlight: Robin Divino

THOR AI: Reducing Cyber Risk for At-Risk Businesses

In a comply-or-else industry, this payment solutions provider doesn’t just clear the bar, but surpasses the competition.

ISO27001 vs. ISO27002

Security Incident Preparedness - Tabletop Exercises

Penetration Testing

NIST Cybersecurity Framework 2.0: A Deep Dive into the New Governance Function

What's so scary about AI (Besides human extinction)

Spin the InfoSec Color Wheel - You Landed on Red!

PAN Storage and the PCI DSS

ISO 27002:2022

PCI DSS v4.0 Compliance: 5 Key Reasons to Define Roles and Responsibilities

3 Basic Ways to Avoid PCI Paralysis

How To Secure Your Software Supply chain

You’re Non-Compliant with PCI. Now What?

5 Best Practices for Securing Your Small Biz

Avoid Audit Fatigue - Using Automation to Create an Efficient Compliance Framework (and Stay Sane)

Proactive Data Security

PCI and storage of PAN

How To Select A PCI Compliant Service Provider: Advice For Small Business Owners

What’s the best practice for masking or truncating PAN data?

The Value of Powerful, Predictive and Cohesive Cybersecurity

Cryptography in the Face of Quantum Computing