Merchants are turning to vendors to handle these security requirements. Verizon report: 40 percent of companies were fully compliant with this requirement in 2013. Verizon: 76 percent of all network intrusions involve weak or stolen credentials. The problem? Old systems that may have been around for years, according to Jeff Man, a security evangelist at Tenable Network Security. The recent spate of high-profile data breaches has gotten the attention of the people in the C-level suite, he said. The merchant is still responsible for the security of the data.”]
Source: https://www.csoonline.com/article/2851642/5-pci-compliance-gaps.html