Critical Thinking Questions 1. What advantages does use of an MSSP offer a small retailer like Fairplay? Can you think of any potential drawbacks of this approach? Is there a danger in placing too...

Critical Thinking Questions

1. What advantages does use of an MSSP offer a small retailer like Fairplay? Can you think of any potential drawbacks of this approach? Is there a danger in placing too much trust in the use of an MSSP? Explain?

 2. Data breaches at major retailers, such as Neiman Marcus, Target, and others, in recent years have shown that compliance with the Payment Card Industry Data Security Standard (PCI DSS) is no guarantee against an intrusion (see Vijayan, Jaikumar, “After Target, Neiman Marcus Breaches, Does PCI Compliance Mean Anything?,” ComputerWorld, January 24, 2014). If you were a member of Fairplay’s management team, what additional actions would you take to ensure your customer’s credit card data is not stolen?

 3. Do research on the Web to gain insight into the evolution of the PCI DSS standard. What major changes were made in moving from PCI 2.0 to PCI 3.0? What changes are being suggested for future versions of the PCI standard?