CHALLENGE “Today’s customers require more flexibility in the way they choose to pay,” explained Mike Coumerilh, information security consultant at NISC. “Our members have their choice with a vast variety of payment solutions depending on their customers’ needs.” When members inquired about which self-assessment questionnaire (SAQ) to fill out or how to respond to a particular question, NISC would answer to the best of its ability with its limited understanding of the member’s particular environment. “We would refer them to the Payment Card Industry Data Security Standard (PCI DSS) requirements and security assessment procedures PDF or First Data, their acquirer, for support,” says Coumerilh. “It was difficult to differentiate some concepts that were similar but different. Becau

Join for free to read