Pointe Solutions, Inc.

http://www.bankinfosecurity.com//cyber-mandates-for-big-ba

As you may already know, SSL and early TLS are not considered strong cryptography and cannot be used as a security control after 30th June, 2016. Prior to this date, existing implementations that use SSL and/or early TLS must have a formal Risk Mitigation and Migration Plan in place. Effective immediately, new implementations must not use SSL or early TLS. POS POI terminals (and the SSL/TLS termination points to which they connect) that can be verified as not being susceptibl...e to any known exploits for SSL and early TLS, may continue using these as a security control after 30th June, 2016. The PCI Council has just released PCI DSS version 3.1, which calls for mothballing the SSL encryption protocol. PCI DSS version 3.1 must be used for all PCI assessments after 30th June, 2015. Again, clients have until 30th June, 2016 to comply with this requirement as long as a Risk Mitigation and Migration Plan is in place. http://www.bankinfosecurity.com//pci-dss-version-31-whats-

http://www.cnbc.com/id/102477081#.

Lessons Learned From Target Security Breach and PIN Security (TR-39) Audits Due in 2014... http://www.pointesolutionsinc.com/news.html