<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
	xmlns:media="http://search.yahoo.com/mrss/"
	>
<channel>
	<title>Comments on: The Great PCI Security Debate of 2010:  Part 2</title>
	<atom:link href="http://www.mckeay.net/2010/01/18/the-great-pci-security-debate-of-2010-part-2/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mckeay.net/2010/01/18/the-great-pci-security-debate-of-2010-part-2/</link>
	<description>The views of one man on security, privacy and anything else that catches his attention.  The views expressed on this blog do not reflect the views of my employer or anyone other than myself.</description>
	<lastBuildDate>Thu, 02 Feb 2012 21:45:54 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: Sebastian Kübeck</title>
		<link>http://www.mckeay.net/2010/01/18/the-great-pci-security-debate-of-2010-part-2/comment-page-1/#comment-5843</link>
		<dc:creator>Sebastian Kübeck</dc:creator>
		<pubDate>Sun, 24 Jan 2010 17:14:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.mckeay.net/2010/01/18/the-great-pci-security-debate-of-2010-part-2/#comment-5843</guid>
		<description>Thanks for recording the debate! Really enjoyed it!

For me, the result of this debate is clearly that the PCI DSS has a levelling effect on merchants (including PSPs). Merchants with bad security practices get better while merchants with excellent security practices get worse.
As the group of merchants bad security practices is by far bigger than the other one, we will likely see less merchants getting breached in total.
On the other hand, I guess that the majority of merchants with excellent security practices prior to PCI DSS are also the ones that process most credit card data. This will likely end in a situation where we have less breached merchants but more breached records.
The Verizon breach report is already pointing in that direction (by far most breached records at major Level 1 merchants). The question is if this is what card brands and customers really want from the PCI DSS?</description>
		<content:encoded><![CDATA[<p>Thanks for recording the debate! Really enjoyed it!</p>
<p>For me, the result of this debate is clearly that the PCI DSS has a levelling effect on merchants (including PSPs). Merchants with bad security practices get better while merchants with excellent security practices get worse.<br />
As the group of merchants bad security practices is by far bigger than the other one, we will likely see less merchants getting breached in total.<br />
On the other hand, I guess that the majority of merchants with excellent security practices prior to PCI DSS are also the ones that process most credit card data. This will likely end in a situation where we have less breached merchants but more breached records.<br />
The Verizon breach report is already pointing in that direction (by far most breached records at major Level 1 merchants). The question is if this is what card brands and customers really want from the PCI DSS?</p>
]]></content:encoded>
	</item>
</channel>
</rss>

