Set of security requirements for credit card processors
POPULARITY
Heather Florio is the second-generation owner and CEO of Desert Harvest, a company pioneering sustainable solutions in pelvic and sexual health. Recognized by Authority Magazine as one of the Top 50 Women in Wellness and featured in Forbes as a top woman in business, Heather has spent over 30 years driving innovation in the industry.Under her leadership, Desert Harvest has transformed pelvic healthcare, funding medical research, launching science-backed products, and advocating for those suffering in silence. As a pelvic health specialist and "Sexpert," Heather shares her expertise globally, speaking on panels and at conferences to raise awareness about chronic pelvic health issues.In This Conversation We Discuss:[00:14] Intro[01:09] Developing products that align with brand mission[01:30] Identifying market gaps through personal experience[03:26] Building a business where people find their niche[04:53] Following Ecommerce industry shifts to stay ahead[06:45] Partnering with nonprofits for awareness [08:57] Evolving a brand's online presence over decades[10:35] Selling online before Ecommerce platforms existed[12:00] Struggling with early web design tools [13:59] Navigating regulatory changes in Ecommerce[15:28] Episode sponsors: StoreTester and Intelligems [18:40] Using AI for customer acquisition & targeting[20:18] Optimizing for AI-driven recommendations[21:10] Adapting to AI-driven consumer research[25:41] Building consumer trust through education[27:01] Creating a brand connection that lastsResources:Subscribe to Honest Ecommerce on YoutubeScientifically studied, all-natural supplements and skincare desertharvest.com/Follow Heather Florio linkedin.com/in/heather-florio-468822a4Book a demo today at intelligems.io/Done-for-you conversion rate optimization service storetester.com/If you're enjoying the show, we'd love it if you left Honest Ecommerce a review on Apple Podcasts. It makes a huge impact on the success of the podcast, and we love reading every one of your reviews!
In this podcast episode, Lori delves into the intricacies of credit card processing for businesses, particularly coaches and consultants. Emphasizing the importance of selecting the right provider, the speaker shares personal experiences and practical advice on navigating fees, ensuring good customer support, and understanding billing structures. Key points include the benefits of personalized service from smaller providers, the significance of PCI compliance, and the potential cost savings from switching providers. The episode serves as a comprehensive guide for entrepreneurs to make informed decisions, ultimately enhancing their business's profitability and operational efficiency. Resources: Are you frustrated that your business isn't growing? "Messy to Magnetic: Unlocking the Secret to Effective Marketing" is a free course that goes over the top 10 mistakes small business owners make with attracting their ideal client and converting those clients to leads. Click here for your free gift! Join Lori's private Facebook group - Make Your Marketing Simple. Lori interviews her guests in the group (giving you advance listening!) and has a community of small business owners just like yourself to connect and grow their businesses. Join now! Schedule a Website Biz Accelerator call. Answer just a few questions and Lori will audit your website for the ONE biggest change you can make to your site to get more clients. Schedule here! Connect with Lori
Learn more about cyber risks for small businesses: Are you a small-medium business owner? Did you just get a message from your bank telling you to call SecurityMetrics? Are you worried about having a bad experience? Do you know what PCI even means? This episode is for you.Learn how SecurityMetrics can help you navigate this regulatory landscape. We'll discuss:Why your processor is making you do PCI compliance: Did you know that nearly half of all cyberattacks target small businesses?What calling into SecurityMetrics looks like. Learn what information you need handy so you can get your compliance done as quickly as possible, and the questions you should ask to get the best service.Support Stories: Discover how other small businesses have successfully leveraged SecurityMetrics to achieve compliance.Tips and Tricks: Get practical advice on how to optimize your PCI compliance efforts and minimize risks, keeping your business and your customers more secure.Whether you're just starting your PCI compliance journey or looking to improve your existing processes, this video will provide valuable insights and actionable advice.Request a Quote for a PCI Audit ► https://www.securitymetrics.com/pci-audit Request a Quote for a Penetration Test ► https://www.securitymetrics.com/penetration-testing Get the Guide to PCI DSS compliance ► https://www.securitymetrics.com/lp/pci/pci-guide Get FREE security and compliance training ► https://academy.securitymetrics.com/ Get in touch with SecurityMetrics' Sales Team ► https://www.securitymetrics.com/contact/lets-get-you-to-the-right-place
Matteo Collina and Luca Maraschi join the podcast to talk about Platformatic. Learn about Platformatics' incredible 4.3 million dollar seed round, its robust features and modular approach, and how it addresses the unique challenges faced by devs and enterprises. Links https://platformatic.dev/docs/getting-started/quick-start-watt Matteo Collina: https://nodeland.dev https://x.com/matteocollina https://fosstodon.org/@mcollina https://github.com/mcollina https://www.linkedin.com/in/matteocollina https://www.youtube.com/@adventuresinnodeland Luca Maraschi: https://www.linkedin.com/in/lucamaraschi https://x.com/lucamaraschi We want to hear from you! How did you find us? Did you see us on Twitter? In a newsletter? Or maybe we were recommended by a friend? Let us know by sending an email to our producer, Emily, at emily.kochanekketner@logrocket.com (mailto:emily.kochanekketner@logrocket.com), or tweet at us at PodRocketPod (https://twitter.com/PodRocketpod). Follow us. Get free stickers. Follow us on Apple Podcasts, fill out this form (https://podrocket.logrocket.com/get-podrocket-stickers), and we'll send you free PodRocket stickers! What does LogRocket do? LogRocket provides AI-first session replay and analytics that surfaces the UX and technical issues impacting user experiences. Start understand where your users are struggling by trying it for free at [LogRocket.com]. Try LogRocket for free today.(https://logrocket.com/signup/?pdr) Special Guests: Luca Maraschi and Matteo Collina.
Alicia walks through the key announcements from Intuit's October 2024 In The Know webinar, including the new QuickBooks payments revenue share program offering ProAdvisors 20% of processing fees for three years. She details the new cost allocation feature in payroll that lets businesses track labor costs across projects and classes, and explains the new recurring payments system that streamlines automated billing. The episode concludes with updates about ProAdvisor Academy and the transition to Credly for certification badges.SponsorsIgnition - https://uqb.promo/ignitionCoefficient - https://uqb.promo/coefficientArtiffex - https://uqb.promo/artiffex(00:00) - Welcome to the Unofficial QuickBooks Accountants Podcast (00:51) - QuickBooks Payments Revenue Share Program (08:26) - Cost Allocation in Payroll (12:50) - New Recurring Payments Feature (15:40) - Setting Up Recurring Payments in QBO (20:50) - Customer Payment Options (24:04) - Benefits of PCI Compliance (26:57) - New ProAdvisor Training and Certification (30:57) - Upcoming Events and Courses Send your Questions/Comments (we could read/answer them on air) ask@uqapodcast.comLinks/Apps Mentioned in this episode:https://intuit.ondemand.goldcast.io/on-demand/0c9af5fd-c588-445f-9651-0c64ba8a8c6dEnroll for Alicia's Nov-Dec QBO Complete Hands-On Training (HOT) at https://royalwise.lpages.co/qbo-complete/ Check out Alicia's step-by-step QBO Textbooks at http://www.questivaconsultants.comIntuit's 2024 Investor Day event: https://www.youtube.com/embed/8cJ9vqr6gYg?si=C3UD7Hsxu2QMtx4rHector's App - RightTool www.righttool.app
Hector and Alicia dive deep into QuickBooks Online's October 2024 updates, dissecting new features and improvements across payroll, search functionality, and recurring payments. They explore the potential impact of AI-powered anomaly detection in payroll and discuss the implications of enhanced transaction search capabilities. The hosts also share their thoughts on the upcoming Intuit Connect conference and its significance for QuickBooks professionals.SponsorsIgnition - https://uqb.promo/ignitionCoefficient - https://uqb.promo/coefficientArtiffex - https://uqb.promo/artiffexSend your Questions/Comments (we could read/answer them on air) ask@uqapodcast.comLinks/Apps Mentioned in this episode:Enroll for Alicia's Nov-Dec QBO Complete Hands-On Training (HOT) at https://royalwise.lpages.co/qbo-complete/Intuit's 2024 Investor Day event: https://www.youtube.com/embed/8cJ9vqr6gYg?si=C3UD7Hsxu2QMtx4rHector's App - RightTool www.righttool.appAlicia's 1099 class: http://royl.ws/QBO1099Alicia's RoyalWise OWLS QBO Training - http://royl.ws/uqapodcastIntuit Connect Conference www.quickbooksconnect.comCheck out Alicia's step-by-step QBO Textbooks at http://www.questivaconsultants.comThe Comprehensive Guide to Converting from QuickBooks® Desktop (QBDT®) to QuickBooks® Online (QBO®) https://www.amazon.com/dp/B0D8L29Z5LQuickBooks Online: From Setup to Tax Time https://www.amazon.com/dp/B0CXZB1R95Sign up to Earmark to earn free CPE for listening to this podcasthttps://www.earmark.app/onboarding (00:00) - Introduction to QuickBooks Online October 2024 Updates (01:50) - Intuit Enterprise Suite: Pricing and Features (10:38) - W9 Management Module Enhancements (22:15) - AI-Powered Payroll Anomaly Detection (26:43) - HR Manager Role and Payroll Customizations (31:22) - Payroll Updates: Direct Deposit Changes (32:33) - Enhanced Payroll Cost Allocations (40:43) - Advanced Search in QuickBooks Online (48:03) - Recurring Payments and PCI Compliance (54:42) - ProConnect Tax Adjustments (57:29) - Upcoming Events and Conferences
On this episode of Compliance Unfiltered, With PCI-DSS 4.0.1 just being released, the CU Guys thought it fitting to share insights on some of the critical resources available to those undertaking PCI Compliance. Curious about how to ensure your compliance program is airtight? Wondering who can help if you have questions? Struggling with what tools are the right tools for you? Well, the CU guys have covered on all these topics and more, on this week's episode of Compliance Unfiltered!
Send us a Text Message.In this insightful interview, Joe sits down with cybersecurity expert Mr. Jeff Man to delve into his extensive background in security and his impactful tenure at the National Security Agency (NSA). They explore how Jeff embarked on his security career, the critical mission of the NSA, and the agency's compartmentalized structure. Jeff recounts his experiences working on significant projects at the NSA and underscores the importance of compartmentalization for security. The discussion also highlights the challenges of government work and the stringent entry requirements for agencies like the NSA.The conversation spans various topics, including the complexities of handling different telecom and operating systems, the advanced technology at the NSA, the pioneering days of hacking and network security, and the formation of the first red team. Jeff shares his motivations for staying at the NSA and the circumstances that led to his departure. Additionally, he talks about his current work in PCI compliance and his active participation in the security community through conferences and podcasts. Don't miss this deep dive into the world of cybersecurity from a seasoned expert.00:00 Introduction and Podcasting03:47 Getting into Security10:47 Jeff's Background and Entry into the NSA15:58 The Mission of the NSA22:27 Challenges of Working in the Government29:07 Overlapping Projects and Duplication of Efforts31:02 Technological Advancement at the Agency36:47 The Early Days of Hacking and Network Security51:42 Reasons for Staying at the Agency54:20 Leaving the Agency and the Significant Incident57:06 Current Work in PCI Compliance and Involvement in the Security CommunitySupport the Show.Affiliate Links:NordVPN: https://go.nordvpn.net/aff_c?offer_id=15&aff_id=87753&url_id=902 Follow the Podcast on Social Media!Instagram: https://www.instagram.com/secunfpodcast/Twitter: https://twitter.com/SecUnfPodcastPatreon: https://www.patreon.com/SecurityUnfilteredPodcastYouTube: https://www.youtube.com/@securityunfilteredpodcastTikTok: Not today China! Not today
In this episode, Stan Wisseman and Rob Aragao welcome Justin Young to explore the transformative role of Software Bill of Materials (SBOMs) in enhancing software supply chain security. Justin shares his extensive experience and insights into how SBOMs contribute to the maturation of the software industry, drawing parallels with the auto and food industries' approaches to defect and ingredient tracking.The discussion delves into the regulatory landscape, highlighting the FDA's SBOM requirements for medical devices, the U.S. National Cybersecurity Strategy, and various compliance mandates from CISA, DORA, PCI, and the EU CRA. Justin explains the importance of shifting liability to software vendors and away from end users and open-source developers, emphasizing the need for actively maintained and secure software components.Listeners will gain an understanding of the different SBOM formats, Cyclone DX and SPDX, and their respective advantages. Justin also addresses the challenges organizations face in managing SBOMs, including procurement, validation, and the necessity of a dedicated SBOM program manager.Finally, the episode explores the practicalities of SBOM implementation, from storage and cataloging to enrichment and vulnerability management, offering a comprehensive guide for organizations aiming to bolster their software security practices.Tune in to learn how SBOMs are reshaping the software industry, driving transparency, and enhancing security across software supply chains.Relevant Links:Episode 88: Open-Source Software: Unlocking efficiency and innovationEpisode 41: Do a little dance, Time for some SLSAEpisode 26: Log4j Vulnerabilities: All you need to know and how to protect yourselfEpisode 4: SolarWinds: Bringing down the building… Software Supply-Chain Pressure PointsWhitepaper: The need for a Software Bill of MaterialsSoftware Supply Chain Hub pageFollow or subscribe to the show on your preferred podcast platform.Share the show with others in the cybersecurity world.Get in touch via reimaginingcyber@gmail.com
In this episode of Identity at the Center, hosts Jim McDonald and Jeff Steadman delve into the intricate world of authorization within the IAM space with Omri Gazit, co-founder and CEO of Asserto, and co-chair of the AuthZEN working group at the OpenID Foundation. They tackle the evolution of authorization, from the days of basic role-based access control to the current landscape of fine-grained authorization, including policy and relationship-based access control models. Omri shares his insights on the importance of standards in authorization, the role of developers in adopting these standards, and the journey towards a single authorization control plane for multiple applications. He also discusses the challenges organizations face with over-provisioned access and the potential of AI in enhancing authorization decisions. Listeners will also get a personal glimpse into Omri's life outside of IAM, learning about his passion for kung fu and how the discipline and journey of martial arts have influenced his professional ethos. Tune in for a comprehensive discussion on the future of authorization and the steps IAM practitioners can take to evolve their organization's approach to this critical aspect of identity security. Connect with Omri: https://www.linkedin.com/in/ogazitt/ Learn more about Aserto: https://www.aserto.com/ AuthZEN: https://openid.net/wg/authzen/ Google Zanzibar: https://research.google/pubs/zanzibar-googles-consistent-global-authorization-system/ Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Meet up with our RSM team! Schedule at https://rsmus.com/events/2024-events/join-rsm-at-identiverse-2024.html Attending the European Identity and Cloud Conference in Berlin? Use Discount Code: EIC24idac25 for 25% off. Register at https://www.kuppingercole.com/events/eic2024 Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and follow @IDACPodcast on Twitter.
Tune in this week as Jen Stone sits down with Candice Pressinger, an award-winning payment security leader, discussing the critical role acquirers play in the PCI ecosystem. This episode is a valuable resource for merchants seeking to understand acquirer roles in PCI compliance and gain insights into the broader payments industry.Listen to learn:-How acquirers aid merchants in PCI compliance.-The importance of collaboration within the payments industry-How PCI compliance serves as a strong foundation for overall security postureFilmed at the 2023 PCI Community Meeting in Dublin, Ireland.Hosted by Jen Stone, Principal Security Analyst (MCIS, CISSP, CISA, QSA)[Disclaimer] Before implementing any policies or procedures you hear about on this or any other episodes, make sure to talk to your legal department, IT department, and any other department assisting with your data security and compliance efforts.
In this episode of the SecurityMetrics podcast, Jen Stone chats with Heidi Babi, an ISA, PCIP, and CISSP at Mars Corporation, about managing PCI compliance in a massive, complex organization with hundreds of data flows.Listen to learn:How to break down overwhelming requirements into manageable steps and design flexible solutions for future growth.How to utilize compensating controls and customized solutions to achieve robust security.How to build rapport with internal teams to create a more functional and effective PCI program for your company.Filmed at the 2023 PCI Community Meeting in Dublin, Ireland.Hosted by Jen Stone, Principal Security Analyst (MCIS, CISSP, CISA, QSA)[Disclaimer] Before implementing any policies or procedures you hear about on this or any other episodes, make sure to talk to your legal department, IT department, and any other department assisting with your data security and compliance efforts.
BroadSource SecureCall help merchants get PCI compliance, Podcast, the sanctions are devastating, including losing your ability to receive payment by card, which today can be a death blow Everybody has done it: been on a call where a credit card's details were given. Your organization at some point might have called to collect on an account, or otherwise receive payment. You might have, voluntarily offered card information, possibly to a trusted merchant, especially a small company, or even a charity. But such transactions are likely outside of the compliance set by the credit card giants. And merchants (and that's simply defined as anyone that has been granted the privilege of accepting cards), could be in violation of their merchant agreement, might be outside of security complaisance by doing what may have become, common place. The sanctions are devastating, including losing your ability to receive payment by card, which today can be a death blow. BroadSource SecureCall help merchants get PCI compliance In this podcast, BroadSource's Haydn Faltyn and Jason Thals discuss SecureCall. Featured at a recent CiscoLive event, SecureCall allows a business to better manage risk and escalating costs by 'outsourcing' PCI-DSS compliance to the BroadSource Cloud. The business benefits by reducing, annual PCI-DSS compliance audit costs, Cyber security insurance premiums, Costly (MOTO) processing transaction fees. The technology ensures that no customer card details enter the business. Visit www.broadsource.com.au BroadSource News
On this week's episode of Compliance Unfiltered, the guys jump in with both feet on the tough topic of organizational change and how it impacts an organizations PCI compliance. Adam covers some examples of organizational change with wide reaching impacts. The guys chat about the new version of PCI and how its increasing complexity factors as your organization goes through changes. Finally, Adam gives some insight on planning for organization change as it relates to compliance. All this and more on this week's episode of Compliance Unfiltered. --- Send in a voice message: https://podcasters.spotify.com/pod/show/compliance-unfiltered/message
CyberIntel - Talking Cybersecurity and Compliance (Presented by VikingCloud)
In this episode of CyberIntel, Brian Odian explores the multifactor authentication methods, why it's so important to PCI Compliance, and the authentication mechanisms required for a proper multifactor process. If you have any questions you want answered on CyberIntel, email us at cyberintel@vikingcloud.com and our experts will be in touch - we may even make it the subject of a future episode! CyberIntel provides a deep dive into the world of cybersecurity and compliance. Hosted by Brian Odian, VikingCloud's Director of Managed Compliance Services APAC, amongst other cybersecurity and compliance expert advisors, we explore the nuances of various compliance standards and the latest in cybersecurity news, trends and threats. New episodes every two weeks! CyberIntel is presented by VikingCloud. VikingCloud is leading the Predict-to-Prevent cybersecurity and compliance company, offering businesses a single, integrated solution to make informed, predictive, and cost-effective risk mitigation decisions - faster. VikingCloud is the one-stop partner trusted by 4+ million customers every day to provide the predictive intelligence and competitive edge they need to stay one step ahead of cybersecurity and compliance disruption to their business.
On this episode of The Modern Practice Podcast, host Gary Tiratsuyan is joined by compliance guru, Madison Evers, Practice Solutions Consultant at Rectangle Health. During the conversation, Madison covers: - Action items practices can take to avoid HIPAA violations - Resources practitioners can utilize to avoid costly penalties - Commonly overlooked areas of compliance risk - OSHA and PCI best practices Tune in to hear how your practice can simplify compliance. Connect with Madison on LinkedIn to discuss compliance at your practice: https://www.linkedin.com/in/madison-evers-10071a20b/ Get started on your HIPAA risk assessment: https://ra.officesafe.com/#/123/rhweb Learn more about Rectangle Health's compliance solutions: https://bit.ly/3rvGv9o
In this episode of Weaver: Beyond the Numbers, On the Shop Floor podcast, hosts Colby Horn, Kurtis Dixon, and their guest Brittany George explore the intricacies of PCI compliance and its pivotal role in the retail sector. They discuss the evolution of PCI standards, the challenges, and opportunities they present for businesses, and the broader implications for the retail industry.Key Points: • PCI safeguards cardholder data for retailers and service providers• The shift to PCI version 4.0 brings new challenges and opportunities• Non-compliance can result in severe penalties and business disruptionsPCI compliance is essential for any organization that handles cardholder data. With the impending shift from PCI version 3.2.1 to 4.0, businesses must proactively understand and adapt to the new requirements. This episode offers a comprehensive overview of PCI compliance's importance, challenges, and the strategies companies can employ to remain compliant. Brittany George, a partner of IT advisory services, shares, “PCI was initiated in 2004 by the major card brands. Over the decades, it has evolved in response to the changing security landscape.” The dynamic nature of PCI standards underscores the imperative for businesses to stay abreast of these changes.Subscribe and listen to future episodes of Weaver: On the Shop Floor on Apple Podcasts or Spotify.©2023
Joining Eric to discuss their upcoming webinar is Andrew Lassise (from the Tech4Accountants Podcast) to discuss PCI Compliance, what every tax professional needs to watch for and what the potential risks are for ignoring this. Want to check out the free webinar on August 23rd? register for free here: https://taxrepllc.com/20230823-pci/ Want Andrews quick PCI Compliance Guide? Download it here: https://tech4accountants.net/pci-trn/?utm_source=trn&utm_medium=webinar&utm_campaign=pci&utm_id=pci
Joining Eric to discuss their upcoming webinar is Andrew Lassise (from the Tech4Accountants Podcast) to discuss PCI Compliance, what every tax professional needs to watch for and what the potential risks are for ignoring this.
Do you know all the legal ins and outs of running your own product business? Today on the podcast, I'm joined by Clare Veal of Aubergine Legal, a freelance commercial solicitor, qualified for over 20 years who advises businesses on a range of commercial matters. Clare is an expert in things law for e-commerce as well as lots of other areas. I seized the opportunity, and asked Clare all sorts of questions about everything including refunds, customer data, PCI compliance, terms and conditions and lots more. Clare was so patient, and answered everything, and shared lots of valuable resources and information.It's a great episode to listen to whatever stage you are in of your business, as you can check that you are fully covered and compliant. As Clare explains, the majority of us will be compliant and we will be doing everything right. And if we are not, there'll be a really simple fix for it. So this definitely isn't an episode to worry you!If you have any questions after listening, please feel free to reach out to Clare, her contact details are at the bottom of these show notes.Listen in to hear Claire share:An introduction to herself and her business (02:15)The areas that e commerce law covers (03:10)The five key pieces of legislation you need to know about (03:58)Laws to be aware of around your website and how customers purchase from you (05:08)Sorting out your terms & conditions (06:51)Things to be aware of if you are selling digital products, and copyrighting your work (10:46)Consumer rights to be aware of (12:49)Devising your refund policy (14:44)Data protection (17:39)What is classified as customer data (22:55)How you can legally use your customers' data for marketing (24:41)The CAP code - what it is and what you need to know (28:50)PCI Compliance - what it is and what you need to know (30:32)Other pieces of legal information it is good practise to include on your website (33:11)Legal requirements when working with influencers (35:58)Trademarks (38:18)Business Insurance and Protection for Product Businesses (41:37)Why you need an accountant (33:21)Her main advice for product creators (44:21)USEFUL RESOURCES:Aubergine Legal WebsiteAubergine Legal FacebookClaire Veal Linked InCooling Off Periods: What's a cooling-off period and how do I use it to cancel an order? - Which?Refunds info: Accepting returns and giving refunds: the law - GOV.UK (www.gov.uk)Data Protection Guidance: For organisations | ICOThe Cap Code: Advertising codes - ASA | CAPBlogs from Aubergine Legal:What legal documents do I need for my online business?9 Legal Tips For Selling Online Courses
On this episode of the Cybersecurity Defenders podcast we have a conversation around the history of security tooling with Dr. Anton Chuvakin, Security Advisor at Office of the CISO, Google Cloud.Dr. Anton Chuvakin is currently involved with security solution strategy at Google Cloud, where he arrived via Chronicle Security (an Alphabet company) acquisition in July 2019. He is also a co-host of Cloud Security Podcast http://www.twitter.com/CloudSecPodcastUntil June 2019, Dr. Anton Chuvakin was a Research VP and Distinguished Analyst at Gartner for Technical Professionals (GTP) Security and Risk Management Strategies (SRMS) team. At Gartner he covered a broad range of security operations and detection and response topics, and is credited with inventing the term "EDR." He is a recognized security expert in the field of SIEM, log management and PCI DSS compliance. He is an author of books "Security Warrior", "PCI Compliance", "Logging and Log Management" and a contributor to "Know Your Enemy II", "Information Security Management Handbook" and others. Anton has published dozens of papers on log management, SIEM, correlation, security data analysis, PCI DSS, honeypots, etc. His blog securitywarrior.org was one of the most popular in the industry. In addition, Anton taught classes (including his own SANS SEC434 class on log management) and presented at many security conferences across the world; he recently addressed audiences in United States, UK, Singapore, Spain, Russia and other countries. He worked on emerging security standards and served on the advisory boards of several security start-ups.Before joining Gartner in 2011, Anton was running his own security consulting practice www.securitywarriorconsulting.com, focusing on SIEM, logging and PCI DSS compliance for security vendors and Fortune 500 organizations. Anton earned his Ph.D. degree from Stony Brook University.The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.
**SEASON 2** In this episode, Abhay shares about his infosec journey and how he was introduced to it? He also talks about his current work, his experience of running an infosec company, the communities he is associated with and advice for people starting out & in the infosec industry. We have introduced rapid round questions this season. Tune into the episode to learn more!! Speaker Intro - Abhay Bhargav is the Founder & Chief Research Officer of AppSecEngineer, an elite, hands-on online training platform for AppSec, Cloud-Native Security, Kubernetes Security and DevSecOps. AppSecEngineer delivers hands-on security skills that companies are actually looking for. Abhay started his career as a breaker of apps, in pentesting and red-teaming, but today is more involved in scaling AppSec with Cloud-Native Security and DevSecOps. He has created some pioneering works in the area of DevSecOps and AppSec Automation, including the world's first hands-on training program on DevSecOps, focused on Application Security Automation. In addition to this, he is active in his research of new technologies and their impact on Application Security, specifically Cloud-Native Security. He has contributed to pioneering work in the Vulnerability Management space, being the architect of a leading Vulnerability Management and Correlation Product, Orchestron. Abhay is also committed to Open-Source and has developed the first-ever Threat Modeling solution at the crossroads of Agile and DevSecOps, called ThreatPlaybook. Abhay is a speaker and trainer at major industry events including DEF CON, BlackHat, OWASP AppSecUSA, EU and AppSecCali. His trainings have been sold-out events at conferences like AppSecUSA, EU, AppSecDay Melbourne, CodeBlue (Japan), BlackHat USA, SHACK and so on. He's authored two international publications on Java Security and PCI Compliance as well. You can reach out to him on, Twitter - @abhaybhargav LinkedIn - Abhay Bhargav AppSecEngineer Website - https://www.appsecengineer.com/ Follow "Stories of Infosec Journeys" podcast on LinkedIn - Stories of Infosec Journeys Twitter - @InfosecJourneys Instagram & Facebook - @storiesofinfosecjourneys Kindly rate the podcast on Spotify and leave a review on Apple podcast.
Today we discuss the importance of understanding PCI Compliance within your organization and it's networks. PCI isn't something that you "achieve", but rather a continuous journey to ensure you are staying secure.----- Welcome to the channel and to my sarcastic sense of humor! It's an honor to have you here. No, seriously... Thank you for taking the time to read this. Weekly podcasts are uploaded here from my Twitch channel, but are soon to be streamed here live too. ----- / Check Out My Links Below // Twitch: https://www.twitch.tv/officialwillip Substack: https://hackerhub.substack.com/ LinkedIn: https://www.linkedin.com/in/w-parks/ Twitter: https://twitter.com/OfficialWilliP YouTube: https://www.youtube.com/@officialwillip / Disclaimer // Much of the information on or related to OfficialWilliP's social media platforms (Twitch, Twitter, YouTube. etc.) is transcribed/presented as part of his own legal learning experiences. Everything that is showcased on these platforms is according to legal guidelines and should be considered for entertainment purposes only. Methods used or showcased on these platforms may be deemed malicious and illegal if repeated on assets you do not personally own. I do not make any warranties about the completeness, correctness, reliability, and accuracy of this information. Any action you take upon the information on these platforms is strictly at your own risk and OfficialWilliP will not be held liable for any losses, damages, or otherwise legal action taken in connection to the use of this information.
In Episode S4E16, our guest is Abhay Bhargav, the Founder of we45 — a focused Application Security Company, and the Chief Research Officer of AppSecEngineer — an elite, hands-on online training platform for AppSec, Cloud-Native Security, Kubernetes Security, and DevSecOps. The topic Steve Bowcut and Abhay discuss is The Application Security Skills Gap. Abhay gives an informative view of the scope of the skills gap for application security and explains why he thinks the shortage of skilled security professionals is occurring. Steve and Abhay discuss the skills gap's impact on organizations and what they can do to solve this issue. About our Guest Abhay started his career as a breaker of apps in pen testing and red-teaming, but today is more involved in scaling AppSec with Cloud-Native Security and DevSecOps. He has created some pioneering works in the area of DevSecOps and AppSec Automation, including the world's first hands-on training program on DevSecOps, focused on Application Security Automation. Abhay is active in the research of new technologies and their impact on Application Security, specifically Cloud-Native Security. He is the architect of a leading Vulnerability Management and Correlation Product, Orchestron, from we45. He is a speaker and trainer at major industry events and has authored two international publications on Java Security and PCI Compliance. Don't miss this insightful look into the application security skills gap.
One of the biggest points that organizations should consider is how to give customers the confidence that they can transact with them in whichever way they want without compromising the security of their data or account information. To do that, they need to have the infrastructure or the functionality in their IT environment. Joining Abhijit Verekar and co-host Mike Caffrey on today's podcast is Jaydeep Palkar, who oversees the PCI Compliance and General Governance for Gap. Jaydeep shares how they're keeping electronic payments and transactions secure for their clients and vendors. As more and more businesses are transitioning from a paper-based process or cash payments to electronic, this is an episode you wouldn't want to miss.Love the show? Subscribe, rate, review, and share!Join the Rethink IT Community today:averoadvisors.com
Tune in this week as Jen Stone, Scott Robinson, and Robbi Watson discuss all things ISO.Listen to Learn:What is an ISO?How can ISOs help their merchants?Tips for an ISO / ISO Program Best Practices[Disclaimer] Before implementing any policies or procedures you hear about on this or any other episodes, make sure to talk to your legal department, IT department, and any other department assisting with your data security and compliance efforts.
E&I Host: Joe Castelluccio, Director, Business DevelopmentGuests: Deborah Jackson, Founder and CEO of Arrow PaymentsColleges and universities are like little cities where each department operates with their own business processes and software. Managing the payment systems for each of these locations is extremely complex when you consider all the different ways schools receive payments for things like tuition, dining, libraries, athletics, parking, and donations. It's even harder to ensure all of these locations are following the credit card processing and PCI compliance security requirements. As a result, most higher education leaders are frustrated with the time, experience, and resources necessary to address all of these situations. In this episode, Joe and our guest Deborah discuss the best ways for schools to reduce costs and streamline payment processing, merchant support, and security to prevent credit card data breaches.Helpful Resources:Case Study: Northwestern University Overhauls Payments & PCI With P2PEVisit the Arrow Payments websiteLearn more about E&I's competitively solicited contract with Arrow PaymentsCooperatively Speaking is hosted by E&I Cooperative Services, the only member-owned, non-profit procurement cooperative exclusively focused on serving the needs of education. Visit our website at www.eandi.org/podcast.Our E&I Hosts David Manz, Business Partnerships Manager, Facilities & Interiors Saul Alvarado, Vice President, Business Partnerships Manager Joe Castelluccio, Director, Business Development Titus Martin, Executive Director, Supplier Diversity Contact UsHave questions, comments, or ideas for a future episode? We'd love to hear from you! Contact Cooperatively Speaking at podcast@eandi.org. This podcast is for informational purposes only. The views expressed in this podcast may not be those of the host(s) or E&I Cooperative Services.
Dr. Anton Chuvakin and Brandon Evans discuss why some organizations desperately try to follow the on-premises blueprint when securing the cloud, how to prevent Compliance from getting in the way of the evolution of IT Security, and what Anton is doing at Google Cloud to deal with the Shared Responsibility Model breaking in the real world.Our Guest - Dr. Anton ChuvakinDr. Anton Chuvakin is now involved with security solution strategy at Google Cloud, where he arrived via Chronicle Security (an Alphabet company) acquisition in July 2019.Anton was, until recently, a Research Vice President and Distinguished Analyst at Gartner for Technical Professionals (GTP) Security and Risk Management Strategies team.Anton is a recognized security expert in the field of log management, SIEM and PCI DSS compliance. He is an author of books "Security Warrior", "Logging and Log Management: The Authoritative Guide to Understanding the Concepts Surrounding Logging and Log Management" and ""PCI Compliance, Third Edition: Understand and Implement Effective PCI Data Security Standard Compliance"" (book website) and a contributor to "Know Your Enemy II", "Information Security Management Handbook" and other books. Resources mentioned in this episodeSome ideas on compliance as code: https://cloud.google.com/blog/products/identity-security/risk-and-compliance-as-code https://www.forbes.com/sites/googlecloud/2022/04/19/demystifying-shared-fate-a-new-approach-to-understand-cybersecurity/https://cloud.google.com/blog/products/identity-security/8-megatrends-drive-cloud-adoption-and-improve-security-for-allSponsor's Note:Support for Cloud Ace podcast comes from SANS Institute. If you like the topics covered in this podcasSPONSER NOTE: Support for Cloud Ace podcast comes from SANS Institute. If you like the topics covered in this podcast and would like to learn more about cloud security, SANS Cloud Security curriculum is here to support your journey into building, deploying, and managing secure cloud infrastructure, platforms, and applications. Whether you are on a technical flight plan, or a leadership one, SANS Cloud Security curriculum has resources, training, and certifications to fit your needs. Focus on where the cloud is going, not where it is today. Your organization is going to need someone with hands-on technical experience and cloud security-specific knowledge. You will be prepared not only for your current role, but also for a cutting-edge future in cloud security. Review and Download Cloud Security Resources: sans.org/cloud-security/ Join our growing and diverse community of cloud security professionals on your platform of choice: Discord | Twitter | LinkedIn | YouTube
Links: The Challenges of Assessing Kubernetes clusters for PCI Compliance. Tailscale released a post titled What we learned (and can share) from passing our SOC 2 Type II audit that is absolutely worth your time and attention. Our friends at Wiz discovered a vulnerability in Oracle Cloud's security where you could mount other customers' EBS volumes simply by asking the API to do so. From the Mouth of AWS Horse: Announcing an update to IAM role trust policy behavior In the world of tools, AWS has launched its rolesanywhere-credential-helper
In this Weeks Podcast, Dawn and Rob discuss Current events including the passing of HM Queen Elizabeth II, September 11th, and Friday Night Lights! We also dive into PCI Compliance, what it is and how you can meet the industry standard. You can always learn more at VanRein Compliance.comSchedule a free Cyber Risk Review of your businessEducation for your team: HIPAA, HB300, GDPR, CCPA, FERPA, DiversityThank You for Listening to the VRC Podcast!Visit us at VanRein ComplianceYou can Book a 15min Call with a GuideFollow us on LinkedInFollow us on TwitterFollow us on Facebook
Today on The TAP (Travel Agent Podcast), We interviewed Ariel M. Weinshanker and talked about her travel industry journey, PCI compliance and sustainability. If you are looking for a more immersive experiential FAM that allows time for meaningful relationship building, gathering high-quality content, and a solid marketing strategy to increase your sales, Apply to a TAP FAM for 2023 TODAY! https://TheTravelAgentPodcast.com/TAPtrips If you like the podcast you'll LOVE our Amazing Travel Agent Facebook Community: Join here: https://www.ttapgroup.com/
Today on The TAP (Travel Agent Podcast), We interviewed Ariel M. Weinshanker and talked about her travel industry journey, PCI compliance and sustainability. If you are looking for a more immersive experiential FAM that allows time for...
Breaches of payment systems are extremely serious. It's a great way not only to have major business problems, but to look like an idiot in front of all your clients, while causing them all kinds of headaches, including potentially emptying their bank accounts. Read more › The post PCI Compliance appeared first on Complete Developer Podcast.
In today's episode of the B2B Vault Podcast, we will give you 12 processing facts you need to know as a business owner. When opening a merchant account, these are the frequently asked questions. So sit back and listen, and you will learn what it takes to get set up. What info do you need to have ready? Will they pull my credit? What kind of business do you operate? How will you be accepting payments? Is there an agreement that you need to sign? How long does it take to get approved? What are the rates and fees? Should I buy or lease equipment? What is PCI Compliance? Who do I call if there is an issue? When do I get my money? What types of alternative payments are available for my business? We go through these questions, and with our unique experience as both a business owner and someone with 20 years of experience in setting up merchant accounts, we got through these questions and talked about the why so you know how to get ready to accept credit cards.
In Today's Podcast, we are talking about PCI Compliance. Merchants and Business owners are always asking me what PCI compliance is and why do we need to do it. So we get into the nitty-gritty of PCI compliance and what happens if your business gets a breach. You will find out why it's required and who requires PCI Compliance. What happens when there is a breach and what happens during an investigation. And I go into a few stories about what happened to 4 different merchants that we helped or consulted with who had PCI Breaches. I encourage everyone to do your PCI compliance SAQ and we go into that as well. Enjoy the podcast! Carpe diem
Does your organization understand PCI compliance? Are you PCI compliant? Join Dave and Darren Gill of PCI Pal as they discuss what PCI means, how to be PCI compliant, and what potential liability your organization may have if you aren't meeting the PCI standards.
This week on Privacy Please, we talk about the Cost of non-compliance and why accurate audits matter.
PCI Compliance, as a Dental Practice owner, do you have it? Do you even know why it's important? PCI Compliance is one of those areas that many practice owners know about, and know that they have to consider it. However, actually making sure their practice is compliant can be a whole different thing. On today's episode of Beyond Bitewings, the Edwards and Associates team welcome Danielle McKinley, a Certified HIPAA Advisor with 10+ years of experience in risk management, and Director of Partnerships at PCIHIPAA. Danielle brings her wealth of knowledge to discuss PCI Compliance and why one of the biggest mistakes practice owners make is pushing it off to the side. She discusses why having someone come in to help with a risk assessment is so important in addition to common myths about PCI Compliance, and why having an association agreement is so important, plus so much more! If you have specific questions about this, please make sure to reach out to the team. Or if you'd like to have your question answered on a future podcast, https://eandassociates.com/contact-us/ (contact Edwards & Associates). Or contact any one of the excellent ADCPA affiliates across the nation at www.ADCPA.org.
Key TakeawaysPayment gateways bring cashless payments to a store, whether that's in person or online. They are even more important for eCommerce stores, as this is generally the only form of accepted payment. Cashless payments are most often thought of to be credit cards, but it could also be account-based payments like ACH / direct deposit, or Wallets, like Apple Pay and Google Pay. Payment Gateways offer a secure environment for eCommerce stores to accept payments. Payment and customer information are set to this secure area to process the orders and the payment. This prevents things like a “Man in the Middle” attack, where someone tried to steal credit card information as it's being transfer. These gateways follow strict guidelines (called PCI Compliance) to ensure data security and integrity. They endure audits, not only of their technical implementation, but of their actual premises to ensure only verified people physically access the servers. This comes at great expense to them. You also need to have an SSL certificate installed on your site. While payment gateways securely process payment methods, the rest of your data needs to be protected too.There are several different types of payment players or systems that Dirk breaks down in the episode. They are Payment Service Providers (PSPs), Payment Methods, Acquirers, and Wallets. PSPs are the companies at the top. They assume the risk and work with payment methods. Payment methods generally work with an Acquirer, which is often a bank that works with the credit card companies. Wallets are a special form of payment that hold funds (unlike credit cards, which are, well, credit). It's good to give customers some options, but too many will overwhelm them. In general, a credit card form and a wallet are a good start.When it comes to choosing a PSP, you need to determine what payment methods you need. This could be affected by what country your in, and a whole host of other factors. For example, if you need in-store payment, going with a PSP that only offers online services won't work. If you serve a country where PayPal isn't allowed, you shouldn't offer that as a payment method. EVO Payments is a global company offering in several countries, and offers a wide range of methods. They also seamlessly integrate with Plesk eCommerce Toolkit to give Plesk customers the fastest way to accept payments no matter where they are. A BIG benefit of EVO Payments on Plesk is they are much cheaper than some gateways, like PayPal, and even more affordable because Plesk customers don't need to pay the monthly fee to use it.
In this episode of the BizDev Podcast, our hosts David and Gary continue the discussion of the legal battle over the Apple Store with the latest developments in South Korea. From there, the two discuss the popular online store payment system, Stripe, and how improper developer usage could lead to PCI compliance issues. While on the topic of PCI compliance and the issues that unexperienced developers can cause, our hosts discuss their own frustrations with hiring under experienced developers and trying to hire contract developers. Lastly, the two discuss the newly revealed Facebook Glasses, the esthetics, technology, and their opinions on whether or not these “spyglasses” are appropriate in our culture. ___________________________________Submit Your Questions to:hello@thebigpixel.netOur Hosts David Baxter - CEO of Big PixelGary Voigt - Creative Director at Big Pixel The Podcast David Baxter has been designing, building, and advising startups and businesses for over ten years. His passion, knowledge, and brutal honesty have helped dozens of companies get their start. In Biz/Dev, David and award winning Creative Director Gary Voigt talk about current events and how they affect the world of startups, entrepreneurship, software development, and culture. Contact Us hello@thebigpixel.net 919-275-0646 www.thebigpixel.netFB | IG | LI : @bigpixelNCBig Pixel 310 S. Harrington Street Raleigh, NC 27603
On this episode Adam gives the listeners a first-hand look at the Take the Bull by the Horns approach to the often-overwhelming world of PCI Compliance. For those new to PCI, we cover how to know which type of PCI Assessment will meet your compliance needs, where/how to find them, and what to do next. Adam gives you an expert look at what it takes to perform an assessment and how to successfully overcome the sheer complexity of PCI-DSS. We spend a fair amount of time covering how to navigate the potential pitfalls of PCI, and how to ensure your team is ready for their Compliance Party! Finally, Adam gives a breakdown of ongoing compliance practices that ensure you're set up for NEXT YEAR'S PCI assessment as well. Follow Compliance Unfiltered on Twitter and Instagram at @compliancesucks --- Send in a voice message: https://anchor.fm/compliance-unfiltered/message
This is the latest episode of The Compliance Guy... I sat down with Ray McGrogan and Steven Kleinberg, Co-founders of CardChoice International to discuss PCI Compliance and the misunderstandings between this and HIPAA Compliance and other little known facts about this type of compliance that is the responsibility of each entity and not your vendor or bank! The guys did a great job of explaining so many aspects of credit card processing requirements and dos and don'ts and the trouble companies can get into for violating the rules... for example, surcharging a debit card whether or not a PIN is entered is a violation but yet so many business are doing it. Tune in to this episode and walk away with more than you would have expected!
This week, the guys talk about a topic that everyone loves, PCI (Payment Card Industry) Compliance! They rant about PCI-DSS compliance levels and standards, plus what first timers need to consider when preparing for a PCI audit. They share tips about how to make your PCI compliance process simpler throughout the year and how to deal with the QSA (auditor), especially when the auditor doesn't understand your environment. Pick up your copy of Cyber Rants on Amazon.Looking to take your Cyber Security to the next level? Visit us at www.silentsector.com. Be sure to rate the podcast, leave us a review, and subscribe!
Have you taken a close look at your merchant account statements? Merchant account fees can seem overwhelming, but they don't have to be. In today's episode, Maria will discuss how you can optimize your merchant account, get the best rates possible, and how and when to negotiate with your payment processor. Knowing your numbers and understanding the variables you have control over can save you thousands of dollars. So grab your most recent account statement and listen up. With Maria's simple tips, your business can begin saving money today. “You have to know your numbers; you have to know what you're being charged. It's important for you to know that reconciliation is key.” ~ Maria Sparagis In This Episode: - Why it's good to scrutinize your monthly statements - Understanding the discount rate - Why Interchange Plus pricing model is beneficial for you - Transaction fees you should look out for - PCI Compliance fee and non-compliance fee - How your MCC code significantly impacts your Interchange fees - Integrating anti-fraud measures can save you lots of money - How much in reserves should you pay - Why you should do a thorough reconciliation Connect with Maria: - Maria Sparagis Website: http://mariasparagis.com/ (http://mariasparagis.com) - DirectPayNet Website: https://directpaynet.com/ (https://directpaynet.com) - LinkedIn: https://www.linkedin.com/in/mariasparagis (https://www.linkedin.com/in/mariasparagis) - Facebook: https://web.facebook.com/directpaynet (https://web.facebook.com/directpaynet) - Instagram: https://www.instagram.com/directpaynet (https://www.instagram.com/directpaynet) - Twitter: https://twitter.com/mariasparagis (https://twitter.com/mariasparagis) - Pinterest: https://www.pinterest.ph/directpaynet (https://www.pinterest.ph/directpaynet)
Rachana Desai is Fabric's vice president of engineering and was previously the director of engineering at Twilio. Before this, she was a senior IT manager at Cisco where she managed a team of 25 people to roll out PCI standards across the organization. She also built online tools that supported digital transactions and payments while maintaining PCI compliance. We're grateful that Rachana is part of our team at Fabric and, as creators of e-commerce software, we wanted to pick her brain on how e-commerce businesses can achieve PCI compliance. After all, if you're a fast-growing e-commerce business and new to PCI compliance, the PCI Security Standard Council website can be overwhelming. To get a crash course on e-commerce PCI compliance and broader security best practices for e-commerce businesses, listen to this Coffee and Commerce episode featuring Rachana. Episode takeaways here:
Ed Harris, CISO at Mauser Packaging is our guest. Ed Harris joined us this week for a fun episode about always being hungry to learn, why cybersecurity practitioners can never be complacent and why after 30 years in the industry Ed continues to strive to find the why, get better. Ed and I also discuss the current challenge facing practitioners from supply chain, detection and more. Ed's Bio: CISSP (397768) • Active Doctoral Student • A people-oriented, hard working, self motivated, analytical thinker. • Career-minded and goal-oriented professional with a strong managerial background. • Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals. • High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity. • Excellent communication and presentation skills. Demonstrated ability to serve as an effective member of senior management team and ability to communicate to a broad range of technical and non-technical management and staff. • Extensive knowledge in Information Security, Information Technology, Disaster Recovery/Business Continuity and PCI Compliance. Ed's Linkedin Profile: https://www.linkedin.com/in/edh03/ CISO Talk is supported by these great partners please make sure to check them out: KnowBe4: https://info.knowbe4.com/phishing-security-test-cyberhub Whistic: www.whistic.com/cyberhub **** James Azar Host of CyberHub Podcast James on Twitter: https://twitter.com/james_azar1 James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/ ****** Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month: http://bit.ly/cyberhubengage-newsletter ****** Website: https://www.cyberhubpodcast.com Youtube: https://www.youtube.com/channel/UCPoU8iZfKFIsJ1gk0UrvGFw Facebook: https://www.facebook.com/CyberHubpodcast/ Linkedin: https://www.linkedin.com/company/cyberhubpodcast/ Twitter: https://twitter.com/cyberhubpodcast Instagram: https://www.instagram.com/cyberhubpodcast Listen Here: https://linktr.ee/CISOtalk
On today's episode of The Restaurant Realty in 10 host, Michael Carro, is joined by Greg Litton of Everest Payment Solutions. Greg explains how credit card PCI compliance works for restaurants and steps you can take to remain compliant and avoid hefty fees."Accepting credit cards is now a necessary evil for restaurants, but you can mitigate your compliance fees."Key Take Aways:PCI stands for Payment Card Industry and is the “sheriff” for businesses that accept credit card payments.PCI Compliance is making sure that you are up to date and up to speed with what PCI says the new standards are.Mitigate your non-compliance fees by being aware of required changes and updating your system prior to the deadlineEnsure you are completing the new annual PCI compliance quiz to avoid unnecessary charges from your credit card service provider.For more information on The Restaurant Realty in 10 or to get the show notes from today's show head over to TheRestaurantRealty.comSubscribe to get new episodes that provide uncensored straight talk geared to answer your restaurant and restaurant real estate questions.
Today on The TAP (Travel Agent Podcast), We interviewed Ariel M. Weinshanker and talked about her travel industry journey, PCI compliance and sustainability. On The TAP, we explore the trials and triumphs of the travel agent's journey, and our...
Jim is a dedicated direct-to-consumer entrepreneur with extensive expertise in online and offline marketing, financial, technical and operational functions. Possessing robust business acumen along with P&L proficiency and marketing savvy while leading high-performance teams and successful client relationships. Specialties: Business Builder, Subscription Commerce Expertise, Marketing, and Offer Configuration Aptitude, PCI Compliance, Best Business Practices, Deep Off-line and Online Direct to Consumer Marketing Experience. Jim is the Founder & CEO of two companies based in Danbury, CT. They are Fosina Marketing Group (founded in 2003) and Amora Coffee (founded in 2011). As we move through 2018, these companies continue to grow under Jim's direction.
Qualified Security Assessor Sean Mathena gives us the inside scoop on PCI (Payment Card Industries) compliance and the rules you need to understand when accepting credit cards in your business, online or offline. PCI compliance is about securing credit card information and protecting your customers. Sean Mathena is a Qualified Security Assessor one of the... Listen to episode