Feed on
Posts
Comments

Monthly Archive for November, 2014

Who is responsible for the card dataflow

Posted in Compliance on Nov 16th, 2014

I was approached by a data centre locally here in Sweden that asked me regarding a contact they have with a company that needs to be PCI DSS compliant. Apparently the company had outsourced their entire infrastructure to the data centre but kept their architecture unit and application management in-house. The question I received was […]

Read Full Post »

Why undisclosed vulnerabilities is not a sales argument

Posted in Business on Nov 15th, 2014

I was recently contacted by a company that sells vulnerability scanners and hacking tools. They promise that they had access to exploit code for vulnerabilities that are unknown. The reason why this was a sales argument was that we could show our expertise by always finding a vulnerability. I argued that this was NOT a […]

Read Full Post »