Did cardsystems solutions break any federal or state laws

Reference no: EM132275832

Lab - Assessment Worksheet

Case Study on PCI DSS Noncompliance: CardSystems Solutions

Overview

In this lab, you reviewed a real-world case study that involved a PCI DSS noncompliance scenario, and you recommended mitigation remedies to prevent the loss of private data for similar organizations.

Lab Assessment Questions & Answers

1. Did CardSystems Solutions break any federal or state laws?

2. In June 2004, an external auditor certified CardSystems Solutions as Payment Card Industry Data Security Standard-(PCI DSS-) compliant. What is your assessment of the auditor's findings?

3. Can CardSystems Solutions sue the auditor for not performing his or her tasks and deliverables with accuracy? Do you recommend that CardSystems Solutions pursue this avenue?

4. Who do you think is negligent in this case study and why?

5. Do the actions of CardSystems Solutions warrant an "unfair trade practice" designation as stated by the Federal Trade Commission (FTC)?

6. What security policies do you recommend to help with monitoring, enforcing, and ensuring PCI DSS compliance?

7. What security controls and security countermeasures do you recommend for CardSystems Solutions to be in compliance with PCI DSS requirements?

8. What was the end result of the attack and security breach to CardSystems Solutions and its valuation?

9. What are the possible consequences associated with the data loss?

10. Who do you think is ultimately responsible for CardSystems Solutions' lack of PCI DSS compliance?

11. What should CardSystems Solutions have done to mitigate possible SQL injections and data breaches on its credit card transaction-processing engine?

12. True or false: Although CardSystems Solutions had proper security controls and security countermeasures, it was not 100 percent PCI DSS-compliant because the company failed to properly implement ongoing monitoring and testing on its development and production systems.

Reference no: EM132275832

Questions Cloud

Does the source have a special purpose or goal : Does this source have a special purpose or goal? (Go to the website of the journal/publisher and see who publishes this(i.e., what organization or government).

How much do they charge their franchisees in marketing fees : Select a restaurant franchise and research their marketing model. How much do they charge their franchisees in marketing fees?

Why do you believe that an acceptable use policy : Why do you believe that an acceptable use policy or an Internet/Intranet Policy is need in the business work place?

Compare and contrast the perfectly competitive market : Compare and contrast the perfectly competitive market, monopoly, monopolistic competition, and oligopoly.

Did cardsystems solutions break any federal or state laws : Do the actions of CardSystems Solutions warrant an "unfair trade practice" designation as stated by the Federal Trade Commission (FTC)?

Calculate the cost of equity for both companies : Using the Gordon Dividend Model, calculate the cost of equity for both companies.

Difference between the two sample means : Construct a 95% confidence interval for the difference between the two sample means

Using cynical budget strategy : Should the chief be applauded for his efficient management, or is he using a cynical budget strategy?

First go through internal recruiting exercise : The General Manager has instructed you to FIRST go through an “Internal Recruiting” exercise before looking outside for new employees.

User Account

All Pages