I'm wading through a 15 page handout written by a computer on PCI DSS Compliance requirements, trying to figure out how to put together a policy for my company. Last year it was the Red Flag program for Identity Theft! I swear every summer the government invents a new program that all companies must comply with - and produce gigantic policy manuals to be filed and ignored. Talk about waste of paper! And time!
|