Blog
Authors

Gary Glover

VP Security Assessments
About

Gary Glover (CISSP, CISA, QSA) is Director of Security Assessment at SecurityMetrics with over 10 years of PCI audit experience and 25 years of Star Trek quoting skills. Live long and prosper as you visit his other blog posts.

Posts by this author
Big Changes for SAQ A: What You Need to Know About 2025 Updates for 11.6.1 & 6.4.3
How to Pass Your PCI Audit in 2025
CSF HITRUST Breakdown: FAQs & Guidance
How Much Does PCI Compliance Cost?
Updates to Multi-Factor Authentication Requirements in PCI v4.0.1
Why You Need to Know About PCI Requirements 6.4.3 & 11.6.1: Eskimming Findings from SecurityMetrics Investigations
Updates to PCI DSS v4.0.1
How Much Does a Pentest Cost?
What are the 12 Requirements of PCI DSS Compliance?
How to Prepare for PCI DSS 4.0
Top 10 Network Security Audit Fails
How to Permanently Delete Files with Sensitive Data
How Does Network Segmentation Affect PCI Scope?
Pentesting vs Vulnerability Scanning: What's the Difference?
Sending Credit Card Info Over Email
What’s changed in CIS Controls (v8)?
The Importance of Log Management
Key PCI DSS 4.0 Requirement Updates
Ransomware Trends: Don't Panic, Prepare
What is CCPA (California Consumer Privacy Act) Compliance?
Changes and Updates to the 4.0 SAQ
PCI DSS 4.0: What is New and How it Affects You Q and A
PCI DSS v4.0: The Future of the PCI Security Standard
Unencrypted Data: A Security Plague
What Antivirus Should I Use?
Visa PCI Enforcement Rules in 2015
Two Factor Authentication – Security Beyond Passwords
The Cost of a PCI Security Policy: What You Need to Know
Printer Security: Does Your Device Let Hackers In?
Security Bulletin: Meltdown and Spectre Vulnerabilities
PCI 3.0: What You Need to Know
Stop Looking for a Mobile Phone Security Standard
Should I Outsource My E-Commerce Website?
PCI 3.1: Stop Using SSL and Outdated TLS Immediately
Preventing Stolen Patient Data Through Remote Access Security
Infographic: Cybercriminals Love When You Use Remote Access
PCI Council Security Awareness Guidance
PCI DSS 3: Agent Training Isn't Enough for Contact Center Compliance
Integrate 2fa Tech To Correctly Comply with PCI Req. 8.3
How Do New Penetration Test Requirements Affect You?
Auditing Archives: The Case of the Overly Helpful Front Desk Clerk
Front Desk Security: Eliminate Internet Browsing on Check-In Machines
Balancing Mobile Convenience and PHI Security
Ditch Typical Anti Virus for True PCI Requirement 5 Compliance
GDPR 101 Part 1: Should I Be Worried?
GDPR 101 Part 2: What are the Requirements of GDPR?
GDPR 101 Part 3: What Should I Do Now?
Auditing Archives: The Case of the Evil JavaScript
Auditing Archives: The Case of the File-Sharing Franchisee
Code Reviews: A Method to Reveal Costly Mistakes
3 Data Security Best Practices
2021 Security Year Review
Securing Keys and Certificates: A PCI Auditor's Perspective