/
/
Jennifer Boyd

Jennifer Boyd

I am an Information Security Compliance Professional with over 15 years of experience, proficient in the areas of Compliance, Auditing, and Risk Mitigation. I have worked for MegaplanIT for 4 years as a Principal Security Consultant.

Share

Jennifer’s professional credentials include:

  • Qualified Security Assessor (PCI-QSA)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • Certified HIPAA Privacy Security Expert (CHPSE)

 

I am an Information Security Compliance Professional with over 15 years of experience, proficient in the areas of Compliance, Auditing, and Risk Mitigation. I have worked for MegaplanIT for 4 years as a Principal Security Consultant.

My current responsibilities include the performance of comprehensive Security Assessments for MegaplanIT clients against regulations and standards including, but not limited to; PCI DSS, HIPAA Security, NIST, and ISO Standards. In addition, I support my clients by providing policy and procedure development and compliance advisory services.

The highlights of my position are working with my clients. I take my role of supporting my clients very seriously and value my commitment to building a strong working relationship with them. I feel it is important to maintain open two-way conversations with clients so they are comfortable during the assessment process which makes it a more enjoyable experience for everyone. I also value my relationship with my co-workers.

One of the great things about working at MegaplanIT is that everyone supports each other. I know I always have the support of management and my peers when needed. At MegaplanIT, we are one team working together with the same goals and missions – providing professional consulting services and building ongoing trusted client relationships, while maintaining honesty and integrity during the process.

Jennifer Boyd

Principal Security Consultant

CISA, CISSP, PCI-QSA, CHPSE

Subscribe to Our Newsletter

ON WATCH, ALL THE TIME

Featured Articles

Point-to-Point Encryption (P2PE) in the payment card industry involves deploying a recognized solution by the PCI council, where hardware, processes, and technology undergo rigorous testing against the current P2PE Standard v3.1 or earlier versions. The P2PE standard combines a recognized and certified PTS device with software and encryption methods to allow cardholder data to be encrypted upon swipe and transmitted encrypted throughout the merchant environment until decrypted within a decryption environment, inaccessible to the merchant.
In today’s rapidly evolving cybersecurity landscape, achieving and maintaining PCI compliance is more critical than ever. With the latest update to PCI DSS 4.0.1, businesses must adapt to meet new standards designed to enhance security and flexibility. This updated PCI Compliance Checklist outlines the essential steps for staying compliant while optimizing your organization’s security posture.
As with many things in popular culture, the PCI Data Security Standard (PCI DSS) has many myths associated with it. The PCI DSS has existed for many years and despite the efforts of the PCI Security Standards Council (PCI SSC) and industry experts, many misconceptions and myths persist. Below we will cover some common PCI DSS myths vs. the reality.
The PCI DSS standard is largely responsible for dictating the way organizations all over the world approach cybersecurity and the protection of credit card data. As v4.0 of the standard approaches, organizations should aim to identify and plan updates for the aspects of their security and compliance programs that are most likely to be affected.
Employees of companies of all sizes are now either required to shelter in place or State and Government lock-downs are forcing companies to require their employees to work remotely. How will this impact your PCI-DSS Compliance?