White Papers in Standards, Regulations & Compliance

PCI DSS Compliance Project Plan

What are the 6 major principles of PCI DSS?

Sponsored by Proofpoint

7 Steps to Reduce Social Account Takeover Risk

Social media account takeovers have become synonymous with embarrassing headlines that feature well-known companies and figures. If your organization has a prominent account, cyber attackers will see you as a ripe target. Download this whitepaper and learn: How these takeovers are possible; Why the complexity of...

Sponsored by Proofpoint

How to Stop Social Media Hacks

Little has been done to address the social media hacking problem despite continued headlines. Most organizations lack the protective countermeasures or the expertise to mitigate risk and respond to incidents. Few companies know how to re-gain control after an account compromise or how to prevent an attack in the first...

Sponsored by Proofpoint

Top 5 Corporate Social Media Risks and How to Protect Your Firm

The FBI, Gartner, and many other security analysts cite social media as one of the fastest growing security threats. That is why it is important for security teams at organizations with a significant social media presence to gain an understanding of this new attack surface and develop a plan to protect the...

Sponsored by Proofpoint

Discovering and Reporting Fraudulent Accounts

Fraudulent social media brand pages are often used for phishing, malware, and other scams which negatively impact your customers and damage your brand reputation. How can organizations take action against these accounts? Download this whitepaper and learn how to: Identify fraudulent accounts; Create an organized...

Tokenization Broker for PCI DSS Compliance

This case study focuses on a large Canadian airline that covers all destinations in North America. It discusses the preparations the airline took towards Payment Card Industry Data Security Standard (PCI DSS) assessment and compliance. It explains how the airline built a system using Intel Expressway Tokenization...

PCI DSS Tokenization Buyer's Guide

In this paper, Payment Card Industry Data Security Standard (PCI DSS) expert and QSA Walter Conway takes you on a deep dive tour of tokenization techniques and their merits. He also demystifies tokenization by discussing use cases, comparing it to encryption and providing various alternatives for implementing...

Using PCI DSS Criteria for PII Protection

Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted standard that applies internationally to any organization that accepts, captures, stores, transmits or processes credit and debit card data. Many organizations, however, have mandates to protect Personally Identifiable Information (PII). In...

Scanning Databases for Credit Card Information

Today's enterprise consists of numerous applications and a large number of them handle credit card data. As a result of standard processing, it is often the case that credit card data gets stored within file systems and databases in clear text - which poses a huge security risk. It is vital that all occurrences of...

Automated, Continuous PCI Compliance

This white paper details how Tripwire IT security and compliance automation solutions help keep the IT infrastructure in a continuously PCI-compliant - and secure-state. Tripwire Enterprise does this with a compliance policy for PCI, file integrity monitoring, real-time analysis of change and easy access to...

Reducing the Cost of Achieving PCI Compliance

Of all the compliance regulations, mandates and guidelines, you're most likely to encounter PCI. Any vendor, organization, entity, group, business, etc., that accepts and processes credit cards falls under the PCI requirements standard and is subject to its audit cycles. PCI DSS covers a range of physical and...

Sponsored by Tenable Network Security, Inc.

Real-Time Compliance Monitoring

Leveraging Asset-Based Configuration and Vulnerability Analysis with Real-Time Event Management It is crucial to monitor for compliance in a manner as close to real time as possible to ensure the organization does not drift out of compliance over time. The greater the gap between monitoring cycles, the more likely...

Five Ways to Reduce Your IT Audit Tax

Most organizations spend 30-50% more on compliance than they should 1. No matter the industry, with regulations such as GLBA, PCI, FISMA, SOX, and other regulations and mandates, it seems nobody is immune to scrutiny - but why spend so much more than what is necessary? In order to reduce the burden of an IT audit,...

Meet PCI DSS Compliance Requirements for Test Data with Data Masking

Whether you are working towards your first or next PCI DSS audit, you know that compliance isn't scored as a one or a zero - it's measured on a sliding scale. You've successfully argued for adoption of various security technologies to protect cardholder data, including encryption and firewalls, and have come to...

Six Ways to Reduce PCI DSS Audit Scope by Tokenizing Cardholder Data

Merchant banks, card processors and payment gateways are all seeking ways to simplify and reduce the scope of the Payment Card Industry's Data Security Standard (PCI DSS) compliance by shrinking the footprint where cardholder data is located throughout their organization. By reducing the scope, these organizations can...