Harvard Business Review Case on Card Data Breach and PCI Compliance
The September 2007 issue of the Harvard Business Review contains an article titled "Boss, I Think Someone Stole Our Customer Data" (purchase required) consisting of a case study along with accompanying commentary from four executives.
This case presents the fictional story of an electronics retailer who has been notified that it is "showing up as a common point of purchase for a large number of fraudulent credit card transactions." The case fills out some of the facts - and ends at the point a recommendation to the CEO as how to proceed is required. The executives' commentaries discuss what their recommendations are.
If you're involved in merchant card acceptance and PCI-DSS compliance efforts, we highly recommend you read this case - before your CEO does.





