Timeline for What is a similar security standard to ISO 27001 with more focus on IT security?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 8, 2017 at 13:04 | comment | added | iwaseatenbyagrue |
I had offered it up because it does have a reasonable amount of recognition, and does focus on measures, rather than processes. Generally, too, it isn't a massive stretch to s/credit card data/data/, and in that respect, it offers a pragmatic base (isolate sensitive systems, understand inter-system/inter-zone flows, beware wifi, and firewalls everywhere). It was the infrastructure aspects I had in mind when suggesting it (and maybe ease-of-convincing-the-suits) - I do agree PCI-DSS is not going to solve your security woes, I think it does help as a checklist of things you should be doing.
|
|
| Mar 8, 2017 at 11:58 | comment | added | Rory Alsop♦ | PCI-DSS is really only focused o one tiny subset of controls, and even within the PCI scope it is very limited. I would not use it as a good standard for anything outside protecting card data, and even then it is not ideal. | |
| Mar 7, 2017 at 13:23 | history | answered | iwaseatenbyagrue | CC BY-SA 3.0 |