Page 12 - White Papers in Standards, Regulations & Compliance

Six Ways to Reduce PCI DSS Audit Scope by Tokenizing Cardholder Data

Merchant banks, card processors and payment gateways are all seeking ways to simplify and reduce the scope of the Payment Card Industry's Data Security Standard (PCI DSS) compliance by shrinking the footprint where cardholder data is located throughout their organization. By reducing the scope, these organizations can...

Resiliency, Not Just Recovery

Today, customers demand uninterrupted access to ATMs and online banking. Employees and partners need immediate availability of core business applications, putting tremendous pressure on institutions to ensure the availability of data and business processes - 24x7, 365 days a year. Business continuity is more than...

Man-in-the-Middle Attacks: Helping to Eliminate the Threat Without Impacting the Business

A sophisticated type of phishing, man-in-the-middle attacks occur when an attacker attempts to intercept communications between two parties, such as a customer and a financial organization, without their knowledge. By doing so, the attacker becomes "the man in the middle." Both parties are unaware of the attacker's...

A Focus on Security Yields Compliance for Free

Over the years, security and compliance experts at ReymannGroup have performed numerous compliance reviews and risk assessments. Through these engagements and other forums, we have engaged hundreds of executives in discussions about the need for a comprehensive and strategic approach to data security and compliance....

Microsoft Windows Server 2008 PKI and Deploying the nCipher Hardware Security Module

The modern corporation is using web based infrastructures in many ways to conduct business across the enterprise and around the globe. Whether it is with customers, partners or employees, the Internet provides instant access and global reach at a fraction of the cost of traditional channels. However, doing...

Portable Panic: The Evolution of USB Insecurity

As USB devices have evolved into useful storage media, they've also turned into a security nightmare for agencies. The usage of USB devices should be encouraged and embraced to improve productivity, but they also must be managed to minimize the risks inherent with these tools. This paper discusses how USB...

Data Masking - Strengthening Data Privacy & Security for Banking Institutions

Many business activities require access to real production data, but there are equally many that do not. Data masking secures enterprise data by eliminating sensitive information, while maintaining data realism and integrity. Many Fortune 500 companies have already integrated data masking into their PCI DSS and GLBA...

Maximizing Data Quality & Minimizing Risk for Banking Institutions

Does your organization use real customer profiles and statistics to drive marketing efforts or real employee data for salary/benefit analysis? Is your organization conducting one of these or other critical business activities that require data analysis? While these activities are critical to organizational success,...

Sponsored by MessageLabs, a Symantec company

Compliance Rules for Financial Firms and Institutions

In the current economic and cultural environment, the financial services industry is being particularly scrutinized with regards to legal and regulatory compliance. Learn more about the legal and regulatory compliance requirements targeting the Finance industry. Download this white paper to: Learn about...

IT in the Financial Sector - The Key to Thriving in a Challenging Economy

Today's financial sector landscape is changing fast, and technology executives are asked to keep up with changing business needs. In a challenging economy, IT staff must integrate diverse technologies from consolidated institutions, solve compliance issues, and somehow figure out a way to do it under budget with less...

Securing Retail POS Systems & Meeting PCI Compliance

There's something new in the air that retailers, especially the directors of information technology (IT) operations at the store, are starting to research and implement called "application whitelisting". This technology is being presented as the panacea for Payment Card Industry (PCI) compliance, and is being welcomed...

PCI DSS Compliance in the UNIX/Linux Datacenter

PowerBroker from BeyondTrust granularly controls access to systems and cardholder data, creates comprehensive logs and audit trails, and has an Entitlement Report that shows auditors that you have created a baseline to assess accountability. This paper discusses how creating a secure access control...

Financial Sector IT Challenges Emerging from Consolidation

Today's financial sector landscape is changing fast, and technology executives are asked to keep up with changing business needs. In a challenging economy, IT staff must integrate diverse technologies from consolidated institutions, solve compliance issues, and somehow figure out a way to do it under budget with less...

4 Key Steps to Automate IT Security Compliance

A Unified Approach for IT, Audit and Operation Teams Are you confident your network is secure and meeting IT security policies? Does your organization have an internal security policy? Can you measure and enforce your IT compliance against that policy? Are your critical security risks being identified and...

From Trust to Process: Closing the Risk Gap in Privileged Access Control

High-privilege administrative accounts hold the keys to gain access to the most sensitive IT processes and proprietary data - yet this level of access is far too often based on little more than trust alone. In this whitepaper, Enterprise Management Associates (EMA) examines this critical issue in IT security...