Page 105 - Cyber Defense eMagazine January 2024

Enhancing PCI DSS Compliance: The Urgent

Need for Risk-Based Prioritization

By Ian Robinson, Chief Architect of Titania

Keeping U.S. commercial critical national infrastructure (CNI) organizations safe is vital to national
security, and it’s never been more top of mind as international conflicts and cyberattacks increase and
create tensions for businesses, governments, and citizens. These 16 critical sectors - communications,
energy, financial services to name a few - with their assets, systems and networks are considered so
crucial that their breakdown or destruction would cripple the operations of the country and put public
health or safety at serious risk.

Payment card data and payment systems within CNI networks are a natural target for cybercriminals
thanks to the riches they hold. And the deadline for organizations to meet the latest data security
standards (PCI DSS 4.0) is looming. By March 2024, compliance goals must be hit, and the harsh reality
is that according to recent research only 37% of these organizations possess the capability to effectively
categorize and prioritize compliance risks within their networks. In the face of ever-evolving cybersecurity
threats, this deficiency poses a significant threat to the security posture of critical national infrastructure
and emphasizes the need for a robust and prioritized approach to compliance.

Cyber Defense eMagazine – January 2024 Edition 105
Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.