Stories about: American Express

A lack of financial penalties and a mandate to publicly admit data breaches may be clouding the real state of credit card payment and security in Australia, according to a senior executive from the Payment Card Industry Security Standards Council.

She had me at hello ... or just about. Our conversation had barely started when privacy activist Betty Ostergren interrupted me to say that she had found my full name, address, Social Security number and a digital image of my signature on the Web.

Swedish police are unraveling a scheme where criminals stole credit card details by tampering with a point-of-sale (POS) terminals at a Toys R Us store in Malmö.

The PCI Security Standards Council, which establishes requirements for the payment-card industry, Tuesday formally launched its payment-application security program.

A California man who served jail time for hacking hundreds of military and government computers nine years ago was charged Tuesday with new computer crimes: stealing tens of thousands of credit card accounts by breaking into bank and card processing networks.

Novell is developing an open source implementation of Microsoft's identity card technology that is functionally equivalent to the Windows software but will run on both Linux and Macintosh.

Michael Barrett, CISO of PayPal; Joseph Moorcones, vice president for worldwide information security at Johnson & Johnson; and Lynn Mattice, vice president and CSO for Boston Scientific, are among the industry's most outstanding CISOs. Here these well-respected security executives offer their insights on New Data Center-style, next-generation security, as well as give tips for securing everything from budgets to WANs.

Becoming the chief information security officer (CISO) of a corporation makes you a strategic IT advisor to business management, the chief information officer, and the rest of the information technology staff. Just as no company is the same as another, the job of CISO -- or alternately, "chief security officer," which might include physical security as well -- isn't either. The four security professionals who share their priorities with us make it clear there's nothing cookie-cutter about the top IT security job.

Judging by the buzz at last week's RSA Conference, few data security standards have attracted as much attention in enterprise IT shops as the Payment Card Industry (PCI) data security standard.

Visa Australia has urged credit card merchants to become Payment Card Industry (PCI) compliant by Christmas, or risk falling victim to fraud.