I have a longer post that I’ve held off on so far regarding the Savvis lawsuit and it’s potential impact on the retail community, but, as I hash through that effort (and try to make it a little less ‘rangey’), I thought I’d put this out…

If you are unfamiliar with the Savvis suit, the details can be found in this article from Kim Zetter (link).  It’s an interesting read and does a really good job of summarizing the situation and the potential impacts to the PCI community.  For those of us in the retail security world, there are some major issues in play here and, if this suit goes forward with Savvis losing, some major implications for the merchant community as well.

As with anything that is highly disruptive (or may become highly disruptive and is therefore scary) there are a lot of people with comments, insights, and opinions regarding the entire affair and what might come out of it.  I have my own feelings (of course) and I’ll try to get those up here in the near future, but, in the meantime - here are some links to posts/articles that I think would be useful and informative:

Article - A post by SPSP regarding the nature of the QSA relationship with the standard and clients - if you want to understand how QSAs are looking at this and thinking about it.

Article - Another security guy - but talks about the potential changes to the QSA approach to audits…

Article - a post from Rebecca from Realtime-IT Compliance - good thoughts

Article - short post from idexperts, but with some really important points - again the mention of conflict of interest…

Article - for those that really want the legal viewpoint - David Navetta lays things out in detail…

Article - a CNN story from back when the breach was first acknowledged

There are some others out there, but I think that this is a really good starting point - these aren’t geared specifically to the retail/hospitality space, but by taking a look through these I think you can glean some useful pieces of information.  My other post (if I ever get it up there) will attempt to address how this all does and potentially might impact the retail space.  Thanks and enjoy.