What is your assessment of the auditors findings

Reference no: EM132276463

Lab : Assessment Worksheet

Case Study on PCI DSS Noncompliance: CardSystems Solutions

Overview

In this lab, you reviewed a real-world case study that involved a PCI DSS noncompliance scenario, and you recommended mitigation remedies to prevent the loss of private data for similar organizations.

Lab Assessment Questions & Answers

1. Did CardSystems Solutions break any federal or state laws?

2. In June 2004, an external auditor certified CardSystems Solutions as Payment Card Industry Data Security Standard-(PCI DSS-) compliant. What is your assessment of the auditor's findings?

3. Can CardSystems Solutions sue the auditor for not performing his or her tasks and deliverables with accuracy? Do you recommend that CardSystems Solutions pursue this avenue?

4. Who do you think is negligent in this case study and why?

5. Do the actions of CardSystems Solutions warrant an "unfair trade practice" designation as stated by the Federal Trade Commission (FTC)?

6. What security policies do you recommend to help with monitoring, enforcing, and ensuring PCI DSS compliance?

7. What security controls and security countermeasures do you recommend for CardSystems Solutions to be in compliance with PCI DSS requirements?

8. What was the end result of the attack and security breach to CardSystems Solutions and its valuation?

9. What are the possible consequences associated with the data loss?

10. Who do you think is ultimately responsible for CardSystems Solutions' lack of PCI DSS compliance?

11. What should CardSystems Solutions have done to mitigate possible SQL injections and data breaches on its credit card transaction-processing engine?

12. True or false: Although CardSystems Solutions had proper security controls and security countermeasures, it was not 100 percent PCI DSS-compliant because the company failed toproperly implement ongoing monitoring and testing on its development and production systems.

Reference no: EM132276463

Questions Cloud

Upon which theoretical framework or model would it be based : What do you think are the distal (ultimate) influences for the "reversal of fortunes" described in the article?

Compute the cost of the ending inventory : Whispering Winds Corp. had 100 units in beginning inventory at a total cost of $12,000. Compute the cost of the ending inventory and the cost of goods sold

Distinguish between white-list and black-list spam filters : In about 200 words, distinguish between white-list and black-list SPAM FILTERS, then outline the advantages and disadvantages of each.

What are the effects of modern technology on children : What effect does social media have on real-life communications? What are the effects of modern technology on children?

What is your assessment of the auditors findings : Do the actions of CardSystems Solutions warrant an "unfair trade practice" designation as stated by the Federal Trade Commission (FTC)?

Compute the cost of the ending inventory : Cullumber Company reports the following for the month of June. Compute the cost of the ending inventory and the cost of goods sold under FIFO and LIFO

What strategies or tactics were used to do this successfully : In this assignment, you will discuss the role of public relations in an integrated marketing campaign. Note that this journal is private between you.

What is the gross profit of the company from one product : Variable costs of the company amount to 220$ for a unit of product. What is the gross profit of the company from one product

Describe the population expressing the determinant : Compare other locations with the one you selected (how does prevalence compare in neighboring counties, the state, or the nation)?

User Account

All Pages