Firms are struggling to maintain compliance with PCI DSS standards, SearchSecurity.com reports. That's based on the "2011 Verizon Payment Card Industry Compliance Report," which looked at more than 100 PCI DSS assessments conducted by Verizon's PCI Qualified Security Assessors in 2010, based on compliance with 12 PCI DSS standards. The report found 21 percent of organizations were fully compliant, and when compliance is achieved, it's not maintained through the next assessment period. Organizations are meeting about 80 percent of requirements, a Verizon spokesman said, adding, "We're seeing lots of scrambling to get things in order for the assessor, and that's not the intent of PCI DSS at all."
Full Story