Page 3 - White Papers in Standards, Regulations & Compliance

Using PCI DSS Criteria for PII Protection

Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted standard that applies internationally to any organization that accepts, captures, stores, transmits or processes credit and debit card data. Many organizations, however, have mandates to protect Personally Identifiable Information (PII). In...

Managing Privileged Users on IBM i

Data breaches are more likely to come from inside your walls than outside. Without a way to manage user access, a privileged user can endanger your system at length before you discover it. To protect against that risk - and the chance of failing a PCI or SOX audit - you need to ensure privileged users can't abuse...

Leverage Continuous Monitoring to Achieve PCI-DSS Compliance

In the financial services industry, in-depth log analysis is essential to maintaining enterprise-wide security and meeting compliance requirements, including PCI-DSS regulations. In addition to being required to meet compliance standards, continuous monitoring of customers' financial data activity logs helps to detect...

Tokenization vs. Encryption: Options for Compliance

When do you want to use tokenization over encryption? How do these two technologies help you address security issues, and which is suitable for compliance? How do you decide which is better? You'll find the answers in this independently researched white paper written by data security analyst firm Securosis which helps...

Scanning Databases for Credit Card Information

Today's enterprise consists of numerous applications and a large number of them handle credit card data. As a result of standard processing, it is often the case that credit card data gets stored within file systems and databases in clear text - which poses a huge security risk. It is vital that all occurrences of...

Guide to Mapping Splunk Enterprise to PCI Requirements

Whether security data is coming from cloud-based operations, virtual systems, on-premise systems or third-party outsourced PCI services, Splunk Enterprise can be used to achieve PCI compliance and to improve an enterprise-level security posture. By monitoring all log data, services, processes and port activities,...

Data Protection & PCI Compliance for Dummies

This book provides an easy-to-understand introduction to protecting payment card data and a reference framework you can use as you work with architects, operations, analysts and assessors. This book covers not just the PCI DSS mandates themselves but also ways in which you can employ data protection techniques to...

PCI Compliance Best Practices for Power Systems running IBM i

Complying with PCI requirements is now a normal part of doing business in today's interconnected world. This white paper discusses how the PCI requirements apply to an IBM i server, and describes how PowerTech software can help you meet compliance guidelines. You'll learn:...

PCI Case Study: Managing Security

Recent updates to the Payment Card Industry Data Security Standard have merchants and banking institutions alike working to get up to speed on the latest demands. See how one merchant, Stewart's Shops, (formerly Stewart's Ice Cream Company), a popular chain of convenience stores throughout upstate New York and...

PCI Case Study: Attaining Compliance

In light of recent data breaches and an update to the standard itself, the Payment Card Industry Data Security Standard is of heightened importance to financial institutions and merchants alike. This exclusive case study focuses on Level 1 merchant Ritz Camera Centers, which shows how it has partnered with Bit9 to...

Automated, Continuous PCI Compliance

This white paper details how Tripwire IT security and compliance automation solutions help keep the IT infrastructure in a continuously PCI-compliant - and secure-state. Tripwire Enterprise does this with a compliance policy for PCI, file integrity monitoring, real-time analysis of change and easy access to...

Reducing the Cost of Achieving PCI Compliance

Of all the compliance regulations, mandates and guidelines, you're most likely to encounter PCI. Any vendor, organization, entity, group, business, etc., that accepts and processes credit cards falls under the PCI requirements standard and is subject to its audit cycles. PCI DSS covers a range of physical and...

Sponsored by Tenable Network Security, Inc.

Real-Time Compliance Monitoring

Leveraging Asset-Based Configuration and Vulnerability Analysis with Real-Time Event Management It is crucial to monitor for compliance in a manner as close to real time as possible to ensure the organization does not drift out of compliance over time. The greater the gap between monitoring cycles, the more likely...

Five Ways to Reduce Your IT Audit Tax

Most organizations spend 30-50% more on compliance than they should 1. No matter the industry, with regulations such as GLBA, PCI, FISMA, SOX, and other regulations and mandates, it seems nobody is immune to scrutiny - but why spend so much more than what is necessary? In order to reduce the burden of an IT audit,...

Meet PCI DSS Compliance Requirements for Test Data with Data Masking

Whether you are working towards your first or next PCI DSS audit, you know that compliance isn't scored as a one or a zero - it's measured on a sliding scale. You've successfully argued for adoption of various security technologies to protect cardholder data, including encryption and firewalls, and have come to...