The Ponemon Institute has a new survey capturing the adoption and compliance posture as it relates to PCI DSS. Lots of interesting figures, and a surprising (apparent) decline in broad adoption based on figures provided previously.
“only 28 percent of companies with between 501 and 1,000 employees said they were in full compliance with PCI DSS, according to a study by Imperva, a data security software vendor and the Ponemon Institute, an independent research firm. Moreover, only 70 of the country’s largest corporations (75,000-plus employees) are in full compliance of PCI DSS.”
Find the article referenced above here…
Thoughts on the shift in compliance? Challenges to the survey?