Cloud Security Authors: Yeshim Deniz, Zakia Bouachraoui, Liz McMillan, Elizabeth White, Ravi Rajamiyer

Related Topics: Cloud Security

News Feed Item

PCI Compliance Important to 80% of UK Organisations, According to Breach and Evolution Security Survey

Breach Security, Inc., the leader in web application integrity, security and PCI compliance, and Evolution Security Systems Ltd today jointly released their 2008 UK PCI Compliance Report. Evolution Security Systems is a leader in digital and information security, partnering with institutions to protect their assets and manage their security infrastructure on an ongoing basis. Surveying UK organisations across a variety of market sectors, including healthcare, government, e-commerce, finance and banking, the report findings indicate that PCI compliance is important to eight in 10 UK organisations. Further, 57 percent, are either PCI compliant or actively working toward becoming compliant. While this represents good progress, it also indicates that the UK is trailing the United States in adoption of PCI compliance.

In addition, the survey found that 16 percent of organisations don’t know what it means to be PCI compliant and nearly one in five companies reported not knowing if PCI compliance is important. “With over 40 percent of UK organisations not serious about PCI compliance, sensitive customer and cardholder data is in jeopardy for many of the online transactions that take place,” said Sanjay Mehta, SVP for Breach Security. “Web application hackers are becoming both more savvy and malicious with each passing month, and without the protection afforded by PCI compliance, the data security of these organisations is at risk.”

“PCI compliance has become a significant priority around the world, particularly in the United States, and UK organisations need to wake up to the threat,” said Dale Moreton, head of sales and marketing at Evolution Security Systems. “In addition to trailing U.S. adoption rates, it’s concerning that 20 percent of UK organisations are naive about PCI compliance, its importance and the ramifications of ignoring it.”

With online customer data being nearly impossible to secure and easy to hack, the Payment Card Industry (PCI) established compliance requirements to protect customers by including web application security requirements in its Data Security Standard (DSS). All organisations that process, store or transmit credit, debit or other payment card information must be in compliance with the PCI DSS. Further, requirement 6.6 states that all web-facing applications must be protected and web application firewalls have become the de facto standard for compliance in enterprise organisations.

Breach and Evolution’s report found that one in three UK organisations are not planning to become PCI compliant, while 18 percent are planning to become compliant in three to six months, 11 percent in six to 12 months, and five percent in more than one year.

In addition to immediate PCI compliance, Breach Security’s WebDefend provides organisations with real-time, continuous security for all protected web applications. The device automatically profiles acceptable behavior and dynamically adapts to code changes in a web application. While providing comprehensive security, WebDefend also delivers immediate ROI by providing information on application defects that can disrupt the end user experience and erode an organisations brand.

Interested parties can learn more about the survey from Breach and Evolution at Booth #M75 at InfoSec Europe on April 28-30, 2009.

About Breach Security

Breach Security, Inc. is the leading provider of real-time, continuous web application integrity, security and compliance that protects sensitive web-based information. Breach Security’s products protect web applications from hacking attacks and data leakage, and ensure applications operate as intended. The company’s products are trusted by thousands of organisations around the world, including leaders in finance, healthcare, ecommerce, travel and government. For more information, please visit www.breach.com.

Follow Breach Security on Twitter: http://www.twitter.com/BreachSecurity.

About Evolution Security Systems Ltd

Evolution Security Systems Ltd is a pioneer in digital and information security. Evolution provides a broad range of digital security solutions and products. They have established close links with a full range of major security vendors. As a top tier partner with leading vendors in all major fields of digital security, they maintain close links with a wide selection of third parties to ensure they offer the best possible choice in security products and services.

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

IoT & Smart Cities Stories
Charles Araujo is an industry analyst, internationally recognized authority on the Digital Enterprise and author of The Quantum Age of IT: Why Everything You Know About IT is About to Change. As Principal Analyst with Intellyx, he writes, speaks and advises organizations on how to navigate through this time of disruption. He is also the founder of The Institute for Digital Transformation and a sought after keynote speaker. He has been a regular contributor to both InformationWeek and CIO Insight...
Bill Schmarzo, Tech Chair of "Big Data | Analytics" of upcoming CloudEXPO | DXWorldEXPO New York (November 12-13, 2018, New York City) today announced the outline and schedule of the track. "The track has been designed in experience/degree order," said Schmarzo. "So, that folks who attend the entire track can leave the conference with some of the skills necessary to get their work done when they get back to their offices. It actually ties back to some work that I'm doing at the University of ...
DXWorldEXPO LLC, the producer of the world's most influential technology conferences and trade shows has announced the 22nd International CloudEXPO | DXWorldEXPO "Early Bird Registration" is now open. Register for Full Conference "Gold Pass" ▸ Here (Expo Hall ▸ Here)
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
The Internet of Things will challenge the status quo of how IT and development organizations operate. Or will it? Certainly the fog layer of IoT requires special insights about data ontology, security and transactional integrity. But the developmental challenges are the same: People, Process and Platform and how we integrate our thinking to solve complicated problems. In his session at 19th Cloud Expo, Craig Sproule, CEO of Metavine, demonstrated how to move beyond today's coding paradigm and sh...
@DevOpsSummit at Cloud Expo, taking place November 12-13 in New York City, NY, is co-located with 22nd international CloudEXPO | first international DXWorldEXPO and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time t...
What are the new priorities for the connected business? First: businesses need to think differently about the types of connections they will need to make – these span well beyond the traditional app to app into more modern forms of integration including SaaS integrations, mobile integrations, APIs, device integration and Big Data integration. It’s important these are unified together vs. doing them all piecemeal. Second, these types of connections need to be simple to design, adapt and configure...
Cell networks have the advantage of long-range communications, reaching an estimated 90% of the world. But cell networks such as 2G, 3G and LTE consume lots of power and were designed for connecting people. They are not optimized for low- or battery-powered devices or for IoT applications with infrequently transmitted data. Cell IoT modules that support narrow-band IoT and 4G cell networks will enable cell connectivity, device management, and app enablement for low-power wide-area network IoT. B...
Contextual Analytics of various threat data provides a deeper understanding of a given threat and enables identification of unknown threat vectors. In his session at @ThingsExpo, David Dufour, Head of Security Architecture, IoT, Webroot, Inc., discussed how through the use of Big Data analytics and deep data correlation across different threat types, it is possible to gain a better understanding of where, how and to what level of danger a malicious actor poses to an organization, and to determin...