Practical notes on PCI DSS, privacy law, security testing and audit, written by the team that does the work. Filter by topic, month or keyword.
Canada’s Retail Payment Activities Act: what payment service providers must do since 2025-09-08
Since 2025-09-08, the Bank of Canada supervises payment service providers under the RPAA. Here is who is covered and what registration, risk management, incident reporting and safeguarding involve.
Read the insight →PCI DSS v4.0: the payment-page rules now in force
Two PCI DSS v4.0 requirements aimed at skimming scripts became mandatory on 2025-03-31. Here is what they ask and how to meet them.
Read the insight →Live speaker series
Webinars, conference talks and private sessions on PCI DSS, privacy law and cybersecurity, in English and French.
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.