March 7, 2016<\/span>, The Federal Trade Commission has issued ftc pci audit request from 9 companies<\/a> requiring them to provide the agency with information on how they conduct assessments of companies to measure their compliance with the Payment Card Industry Data Security Standards (PCI DSS).<\/p>\n PCI DSS audits are required by the major payment card issuing companies of retailers and other businesses that process more than 1 million card transactions in a given year, and are intended to ensure that companies are providing adequate protection to consumers\u2019 sensitive personal information.<\/p>\n The nine companies receiving orders from the FTC are: Foresite MSP, LLC; Freed Maxick CPAs, P.C.; GuidePoint Security, LLC; Mandiant; NDB LLP; PricewaterhouseCoopers LLP; SecurityMetrics; Sword and Shield Enterprise Security, Inc.; and Verizon Enterprise Solutions (also known as CyberTrust).<\/p>\n The FTC is seeking details about the assessment process employed by the companies, including the ways assessors and companies they assess interact; copies of a limited set of example PCI DSS assessments, and information on additional services provided by the companies, including forensic audits.<\/p>\n Information collected by the FTC will be used to study the state of PCI DSS assessments.<\/p>\n The Commission is authorized to issue Orders to File a Special Report by Section 6(b) of the FTC Act.\u00a0 The Commission vote to issue the orders was 4-0.<\/p>\n","protected":false},"excerpt":{"rendered":" Commission Issues Orders to Nine Companies That Conduct Payment Card Industry Screening March 7, 2016, The Federal Trade Commission has issued ftc pci audit request from 9 companies requiring them to provide the agency with information on how they conduct … Continue reading