My OLS cohort, Dave Bergert, has initiated a blog worthy of inclusion in your RSS Reader. Dave's working on our PABP certification, so his first couple of posts are straight to the point on that ongoing effort: one references a great piece clarifying the not-too-obvious differences beween PABP and PCI compliance; and the other discusses the changes Dave is incorporating into the jPOS-EE UI (a.k.a., eeweb3) in order to meet Section 3.1 of the PABP requirements (that's the section that deals with things like user names and password complexity).
As background, Dave's obtained his CISSP, CISA, and CompTIA Security+ designations. He's also a former Visa-certified QSA (Qualified Security Assessor) himself. He's one of the few guys out there who is equally adept in both worlds: He can build payment systems from scratch; and audit them as well. That made him very dangerous as an auditor...if you were like this guy and had something to hide.
In short, the man for the job...and a blog well worth reading, especially given that PABP compliance has forced its way centerstage in our payment system world.
Comments