PCI DSS is the security standard for any business handling credit card data. These articles cover what it actually requires, the difference between passing the audit and being secure, and how to approach it, from someone who passed eight of them at a national retailer.
AuditsPass the audit and nothing happens. Fail it and the company loses the ability to take credit cards. For eight straight years I carried a major retailer through PCI audits that nobody outside IT ever noticed, and that invisibility is…
AuditsOur PCI auditor looked at a legacy database connection we could not afford to rebuild and said: wrap it in a VPN. That sentence introduced us to mitigating controls, turned a six-figure project into a configuration change, and taught me…
CompliancePassing an audit and being secure are not the same thing; companies that treat compliance as a checklist get breached at the same rate as those that ignore it. Real protection comes from documentation that reflects how the business actually…
BackupsCoffee in hand, you open an email demanding $500 in Bitcoin to unlock your photos, tax records, and three-year novel, and yesterday's urgent delivery notice was the invitation. It happens thousands of times a day, and the habits that stop…
ComplianceThe regulatory documents are the standards your security program has to satisfy, and most teams never realize they are working from a version that expired. Finding and reading the right ones is half the compliance battle. Here is how to…
CISOI wrote a company's security policies against NIST CSF and 800-53, and now I ghostwrite books for the leaders who do this work. Most policy documents fail for two reasons: nobody knows who owns each step, and nobody knows which…
CISOI ran PCI compliance at a national retailer for twenty years and passed every audit, then started ghostwriting books for the security leaders who live this work. Here is what nobody admits: passing an audit and being secure are not…
Professional ghostwriting for executives, founders, coaches, and authors who want to get the book done right. 113+ books authored. 54+ ghostwritten for clients.
Ready to discuss your book?
BOOK YOUR PRIVATE CONSULTATIONNo pitch. No pressure.
On writing, publishing, and selling your book. Free, straight to your inbox.
If you don't see the email in a few minutes, check spam and mark it as a keeper.
