Verizon released its fifth study of the Payment Card Industry Data Security Standard, or PCI DSS, compliance landscape. The report contends that organizations often nail a PCI compliance assessment but tend to slip out of compliance. But a close look at Verizon’s report reveals the company makes suspect logical stretches. Some of the most significant payment card breaches – think Heartland Payment Systems, Target, Neiman Marcus – occurred when the companies were PCI compliant on paper. Gartner’s Avivah Litan: “Measuring PCI compliance is more art than science””]
Source: https://www.govinfosecurity.com/blogs/verizons-pci-dss-report-bad-comparisons-p-2538