Answered You can hire a professional tutor to get the answer.
Hi, need to submit a 250 words essay on the topic Payment Card Industry (PCI)/Target Breach.b) The banks or credit card associations may not understand the contents of the requirements for compliance.
Hi, need to submit a 250 words essay on the topic Payment Card Industry (PCI)/Target Breach.
b) The banks or credit card associations may not understand the contents of the requirements for compliance. In that regard, they need a quality security assessor who can guide them through the process. They may sideline such an inevitable step thus putting the entire process at risk. Moreover, they may just do the testing of the environment of the card just to satisfy the Union or stop doing it if they do not receive either external or internal attacks from some time. That will greatly compromise the security standards.
c) The recommendations include following the precise and focused steps set in the struggle for achieving compliance with PCI DSS. The bank should integrate the practices and processes into banks usual routine in regard to securing their credit cards.
d) Governments should intervene so that banks and credit unions comply with the standard. By so doing, they are protecting the citizens and making it easier to trace fraud. The results include bringing the perpetrators to book easily.
On the other hand, the government may also not intervene because the move will give powerful people in governance access to vital information about their enemies. If ethics is not applicable correctly, they may use such information to their advantage and compromise the very reason for its existence.
Prevention mechanisms to avoid attacks include having variety strategies to detect such intrusion. Relying on one leaves a lot of loopholes. Anti-malware software and antivirus with such capabilities should be put into counter memory scraping techniques (Norwood & Catwell, 2009). Integral to the security system is antiphishing mechanisms especially where vendors are partisan. Plans should accommodate segmentation of the organizations network thus controlling access level to sensitive information. It also helps to restrict the number of devices in communication. The overall goal is to prevent loss of data in the
