Australian businesses targets for hackers
With high profile data security breaches occurring across the world, businesses should be keeping up with PCI DSS guidelines now more than ever. However, a report by Security-Assessment said unlike companies in the United States and U.K., Australian businesses are not required by law to disclose the details of data breaches.
“Currently the focus is on the clean-up of data security breaches rather than prevention," said Roger Greyling, a security consultant with the assessment company. "There has been no impetus for businesses to reveal data exposures and minimal fines imposed, which means there is limited incentive for businesses to comply with the PCI DSS."
Greyling said he is concerned that other countries will leave Australia behind as a "soft target" for security breaches. He said security breaches already happen more than people think, so businesses should take their own measures to comply by PCI DSS guidelines.
According to Greyling, the bottom line is that following PCI compliance puts a business on the cutting edge of technology in the country. He said there are only a select few companies in Australia that follow payment guidelines and there needs to be more.