Rethinking the Assumptions Behind PCI-DSS

Evan Schuman writes on his Storefront Backtalk blog about efforts by the National Retail Federation's CIO David Hogan to rethink the assumptions behind the Payment Card Industry - Data Security Standard. According to Hogan, "the bottom line is that it makes more sense for credit card companies to protect their data from thieves by keeping it in a relatively few secure locations than to expect millions of merchants scattered across the nation to lock up their data for them." More details about the NRF's recommendations are on the NRF web site including a letter from Hogan to the PCI Standards Council.