Retailers must upgrade authentication, encryption and pen testing

The PCI Security Standards Council now requires better authentication, encryption and penetration testing by companies that accept consumer payments, improvements lauded by security experts.
"There are a lot of people who consider compliance to be policy for policy sake," said Ryan O’Leary, vice president of the threat research center at WhiteHat Security. "But with these three recommendations, it is really security-industry standards that are finally being forced upon companies. I would