Contact Us

How can we help you?

- Building More Momentum: Why Now is the Perfect Time for Acquirers to Re-Tool their PCI Programs
  February 14, 2014
- Taking Stock and Surviving Windows XP End of Life
  April 10, 2014
- PCI Compliance and the Service Provider
  February 26, 2013
- How to Find Windows XP in your IT Environment
  March 25, 2014
- "We submitted the wrong SAQ. Now what?"
  April 23, 2014
- "We would like to request a credit card number in advance of an event..."
  April 17, 2014
- Taking Stock and Surviving Windows XP End of Life
  April 10, 2014
- OpenSSL 'Heartbleed' Vulnerability Advisory
  April 09, 2014
- bradm says:
  Windows XP is on approximately 27% of the computers in the world. That's a HUGE burden on business to change. Microsoft Security Updates did not stop, but are by paid subscription only now. Windows XP is stable and works very well for specific tasks and needs.
- Richard says:
  The PCI Security Standards Council definition of a Service Provider needs to be updated, and a separate definition established for Managed Services Provider, those entities who deliver various services to a Merchant but who do not transmit/receive, process or store cardholder or credit card transaction data in the performance of those services. Rather, the MSP only has remote access to systems and infrastructure within the Merchant's environment that does transmit/receive, process or store cardholder or credit card transaction data, and therefore many of the PCI-DSS controls do not apply. Further, the PCI SAQ needs to be updated to have a section dedicated to MSPs rather than having to designate many of the controls for applicable to the current definition of Service Provider as N/A and then having to provide a reason for each. I brought this same issue to the PCI Security Standards Council in 2013 but received back a less than satisfactory response.
- Heather Foster says:
  It's interesting when you look at this report and compare it against ControlScan's small merchant PCI study - merchants are showing interest in additional security solutions to better protect their businesses and they are looking to the MSP to provide these solutions. A great opportunity for MSPs to make a difference here.
- Steve Robb says:
  I would suggest that readers also look at machines they know are Windows XP and see whether Service Pack 3 has been installed.
Subscribe
Tweets by @ControlScan
Tags
Acquirers American Express ASV Breaches Cloud Council Encryption Firewalls Hardware Incident Response ISOs Laws level 4 Managed Security Mastercard Merchants Mobile P2PE Payment Application PCI 2.0 PCI 3.0 PCI Program PCI Risk Penetration Testing POS QSA Requirement 11.2 Requirement 11.3 RoC SAQ SAQ B SAQ C SAQ C-VT SAQ D Security Awareness Service Providers Small Business SMB Software SSC Tablet Virtual Terminal Visa Vulnerability Scanning Windows XP
Windows XP Removal
Windows XP Removal

Have you removed Windows XP from your IT network?
- Yes
- No
- Not Sure