Author name: CIO

PCI DSS In 2025: How New Rules Could Simplify Compliance For Merchants

By / Blog /

PCI DSS updates in 2025 will enforce requirements 6.4.3 and 11.6.1, targeting online merchants to enhance payment security against script-based skimming attacks like Magecart. New exemptions may simplify compliance for qualifying merchants who fully outsource payment processing and ensure overall site security. While immediate compliance involves implementing extensive monitoring and script management, long-term goals should focus on attaining SAQ A status to reduce future requirements, emphasizing a strategic approach to ongoing PCI DSS obligations.

https://www.forbes.com/councils/forbestechcouncil/2025/04/02/pci-dss-in-2025-how-new-rules-could-simplify-compliance-for-online-merchants/

New Survey to Gather Practices for the AI Literacy Living Repository

By / Blog / , ,

EU's AI Office launched a survey to collect AI literacy practices for a living repository, currently featuring over 20 examples. This initiative, aiming to enhance AI literacy and support the AI Act's Article 4, invites organizations to share experiences. Contributions will be verified for transparency before inclusion. The repository serves to foster collaboration and learning among AI providers.

https://digital-strategy.ec.europa.eu/en/news/new-survey-gather-practices-ai-literacy-living-repository

Key Part of EU AI Law Under Attack From Hi-tech Industry

By / Blog / , ,

EU AI law faces backlash: Industry pressures lead to voluntary systemic risk assessments in the Code of Best Practices. Reporters Sans Frontières exits talks, citing industry influence and lack of protections for information rights. EU Parliament members express concerns over weakened regulations, risking fundamental rights and democracy.

https://www.eunews.it/en/2025/04/02/key-part-of-eu-ai-law-under-attack-from-hi-tech-industry/

How CISOs Can Use Identity to Advance Zero Trust

By / Blog /

CISOs must prioritize identity security to advance zero trust strategies amid rising identity-based cyberattacks. With breaches increasingly involving valid credentials, a shift from perimeter-based to identity-focused security is critical. Key controls include privilege management (least privilege, secrets management, just-in-time access), access management (adaptive authentication, SSO, MFA), and identity governance (visibility, compliance, automated reviews). Implementing these practices requires a structured roadmap to ensure they work harmoniously, enhancing resilience against evolving threats. The focus is on continuous identity verification for effective risk management.

https://www.csoonline.com/article/3951888/how-cisos-can-use-identity-to-advance-zero-trust.html

This Security Control Is So Good We Don’t Even Have to Turn It On (LIVE in Clearwater, FL)

By / Blog /

TLDR: Live podcast in Clearwater features David Spark, Christina Shannon, and Jim Bowie discussing effective security controls, training strategies, CISO challenges, and the impact of personal digital lives on work security. Topics include security awareness, engaging employees, dealing with high-pressure environments, and the importance of risk understanding in cybersecurity. Emphasis on continuous training, engagement, and management's role in supporting cybersecurity staff to reduce stress and burnout.

https://cisoseries.com/security-control-is-so-good-we-dont-even-have-to-turn-it-on/

CIO-CFO Tensions Jeopardize AI Success, Study Finds

By / Blog /

CIO-CFO relationships are crucial for AI success, but tensions pose risks. A KPMG survey reveals conflicting views on leadership roles and budgets affecting collaboration. While many executives recognize AI's importance, priorities differ, with CFOs often deeming innovation budgets excessive. Strengthening ties through clear roles, leveraging strengths, and joint ownership is vital for effective AI integration. Organizations must foster collaboration to fully harness AI's potential.

https://www.forbes.com/sites/noahbarsky/2025/04/01/we-or-me-choices-key-ai-rollouts-executive-survey-finds/

First Steps to Compliance: Meeting Early Obligations Under the EU AI Act

By / Blog / , ,

EU AI Act compliance begins February 2025, with early requirements like AI literacy and definitions of AI systems effective immediately. Organizations must educate personnel on AI risks and integrate literacy into governance frameworks. Key prohibitions include exploiting vulnerabilities and social scoring. Businesses should assess AI systems, ensure training, and stay updated on regulatory changes for compliance. Proactive approaches in governance may enhance trust and competitive positioning in the AI landscape.

https://kennedyslaw.com/en/thought-leadership/article/2025/first-steps-to-compliance-meeting-early-obligations-under-the-eu-ai-act/

Balancing AI Innovation and Regulation: Why the EU (Still) Needs a True Risk-Based Approach

By / Blog / , ,

EU AI Act needs risk-based approach: The EU should avoid a one-size-fits-all AI regulation, which risks stifling innovation due to overlapping enforcement and lack of risk/benefit analysis. A sector-specific approach is suggested to balance risks and benefits, streamline regulation, and enhance competitiveness, ensuring that future AI guidelines support innovation while safeguarding public interest.

https://project-disco.org/european-union/balancing-ai-innovation-and-regulation-a-risk-based-approach/

Scroll to Top