PCI-DSS is a pain in the backside. There: you think it, I said it. However, it's also got some good stuff that's not just useful for protecting card numbers, but general network security best practice. One example is the requirement that you change the default passwords and disable guest accounts on network devices. Sounds obvious, … Continue reading It’s in PCI-DSS – so why don’t you do it? →