Page 12 - White Papers in Standards, Regulations & Compliance

Regulatory Scrutiny: Protecting Sensitive Data

So what exactly is regulated data? It depends on the industry. Many regulations focus on personally identifiable information on individuals, such as Social Security numbers, addresses, or credit card numbers. It also can be computer access protection data (such as passwords) or protected patient health information...

Reducing the Cost of Achieving PCI Compliance

Of all the compliance regulations, mandates and guidelines, you're most likely to encounter PCI. Any vendor, organization, entity, group, business, etc., that accepts and processes credit cards falls under the PCI requirements standard and is subject to its audit cycles. PCI DSS covers a range of physical and...

Achieving Efficient Governance, Risk & Compliance Through Process & Automation

The procedures, tasks, and behaviors that bear upon compliance can be overwhelming. Yet organizations that can master these activities, operate more efficiently, compete more effectively, and build their brands. Learn how Governance, Risk, and Compliance technologies can help. This white paper presents a low risk,...

Sponsored by Tenable Network Security, Inc.

Real-Time Compliance Monitoring

Leveraging Asset-Based Configuration and Vulnerability Analysis with Real-Time Event Management It is crucial to monitor for compliance in a manner as close to real time as possible to ensure the organization does not drift out of compliance over time. The greater the gap between monitoring cycles, the more likely...

Satisfying GLBA Requirements: Log Management

The Gramm-Leach-Bliley Act (GLBA), also known as The Financial Modernization Act of 1999, was enacted to ensure protection over customer's records and information. Authorization to implement this act was given to The Federal Trade Commission (FTC) with an effective date for compliance set on May 23, 2003. GLBA...

Five Ways to Reduce Your IT Audit Tax

Most organizations spend 30-50% more on compliance than they should 1. No matter the industry, with regulations such as GLBA, PCI, FISMA, SOX, and other regulations and mandates, it seems nobody is immune to scrutiny - but why spend so much more than what is necessary? In order to reduce the burden of an IT audit,...

Meet PCI DSS Compliance Requirements for Test Data with Data Masking

Whether you are working towards your first or next PCI DSS audit, you know that compliance isn't scored as a one or a zero - it's measured on a sliding scale. You've successfully argued for adoption of various security technologies to protect cardholder data, including encryption and firewalls, and have come to...

Six Ways to Reduce PCI DSS Audit Scope by Tokenizing Cardholder Data

Merchant banks, card processors and payment gateways are all seeking ways to simplify and reduce the scope of the Payment Card Industry's Data Security Standard (PCI DSS) compliance by shrinking the footprint where cardholder data is located throughout their organization. By reducing the scope, these organizations can...

Resiliency, Not Just Recovery

Today, customers demand uninterrupted access to ATMs and online banking. Employees and partners need immediate availability of core business applications, putting tremendous pressure on institutions to ensure the availability of data and business processes - 24x7, 365 days a year. Business continuity is more than...

Man-in-the-Middle Attacks: Helping to Eliminate the Threat Without Impacting the Business

A sophisticated type of phishing, man-in-the-middle attacks occur when an attacker attempts to intercept communications between two parties, such as a customer and a financial organization, without their knowledge. By doing so, the attacker becomes "the man in the middle." Both parties are unaware of the attacker's...

A Focus on Security Yields Compliance for Free

Over the years, security and compliance experts at ReymannGroup have performed numerous compliance reviews and risk assessments. Through these engagements and other forums, we have engaged hundreds of executives in discussions about the need for a comprehensive and strategic approach to data security and compliance....

Microsoft Windows Server 2008 PKI and Deploying the nCipher Hardware Security Module

The modern corporation is using web based infrastructures in many ways to conduct business across the enterprise and around the globe. Whether it is with customers, partners or employees, the Internet provides instant access and global reach at a fraction of the cost of traditional channels. However, doing...

Portable Panic: The Evolution of USB Insecurity

As USB devices have evolved into useful storage media, they've also turned into a security nightmare for agencies. The usage of USB devices should be encouraged and embraced to improve productivity, but they also must be managed to minimize the risks inherent with these tools. This paper discusses how USB...

Data Masking - Strengthening Data Privacy & Security for Banking Institutions

Many business activities require access to real production data, but there are equally many that do not. Data masking secures enterprise data by eliminating sensitive information, while maintaining data realism and integrity. Many Fortune 500 companies have already integrated data masking into their PCI DSS and GLBA...

Maximizing Data Quality & Minimizing Risk for Banking Institutions

Does your organization use real customer profiles and statistics to drive marketing efforts or real employee data for salary/benefit analysis? Is your organization conducting one of these or other critical business activities that require data analysis? While these activities are critical to organizational success,...