Page 15 - White Papers in Standards, Regulations & Compliance

Sponsored by Tenable Network Security, Inc.

Real-Time Compliance Monitoring

Leveraging Asset-Based Configuration and Vulnerability Analysis with Real-Time Event Management It is crucial to monitor for compliance in a manner as close to real time as possible to ensure the organization does not drift out of compliance over time. The greater the gap between monitoring cycles, the more likely...

Satisfying GLBA Requirements: Log Management

The Gramm-Leach-Bliley Act (GLBA), also known as The Financial Modernization Act of 1999, was enacted to ensure protection over customer's records and information. Authorization to implement this act was given to The Federal Trade Commission (FTC) with an effective date for compliance set on May 23, 2003. GLBA...

Five Ways to Reduce Your IT Audit Tax

Most organizations spend 30-50% more on compliance than they should 1. No matter the industry, with regulations such as GLBA, PCI, FISMA, SOX, and other regulations and mandates, it seems nobody is immune to scrutiny - but why spend so much more than what is necessary? In order to reduce the burden of an IT audit,...

Meet PCI DSS Compliance Requirements for Test Data with Data Masking

Whether you are working towards your first or next PCI DSS audit, you know that compliance isn't scored as a one or a zero - it's measured on a sliding scale. You've successfully argued for adoption of various security technologies to protect cardholder data, including encryption and firewalls, and have come to...

Six Ways to Reduce PCI DSS Audit Scope by Tokenizing Cardholder Data

Merchant banks, card processors and payment gateways are all seeking ways to simplify and reduce the scope of the Payment Card Industry's Data Security Standard (PCI DSS) compliance by shrinking the footprint where cardholder data is located throughout their organization. By reducing the scope, these organizations can...

Resiliency, Not Just Recovery

Today, customers demand uninterrupted access to ATMs and online banking. Employees and partners need immediate availability of core business applications, putting tremendous pressure on institutions to ensure the availability of data and business processes - 24x7, 365 days a year. Business continuity is more than...

Man-in-the-Middle Attacks: Helping to Eliminate the Threat Without Impacting the Business

A sophisticated type of phishing, man-in-the-middle attacks occur when an attacker attempts to intercept communications between two parties, such as a customer and a financial organization, without their knowledge. By doing so, the attacker becomes "the man in the middle." Both parties are unaware of the attacker's...

A Focus on Security Yields Compliance for Free

Over the years, security and compliance experts at ReymannGroup have performed numerous compliance reviews and risk assessments. Through these engagements and other forums, we have engaged hundreds of executives in discussions about the need for a comprehensive and strategic approach to data security and compliance....

Microsoft Windows Server 2008 PKI and Deploying the nCipher Hardware Security Module

The modern corporation is using web based infrastructures in many ways to conduct business across the enterprise and around the globe. Whether it is with customers, partners or employees, the Internet provides instant access and global reach at a fraction of the cost of traditional channels. However, doing...

Portable Panic: The Evolution of USB Insecurity

As USB devices have evolved into useful storage media, they've also turned into a security nightmare for agencies. The usage of USB devices should be encouraged and embraced to improve productivity, but they also must be managed to minimize the risks inherent with these tools. This paper discusses how USB...

Data Masking - Strengthening Data Privacy & Security for Banking Institutions

Many business activities require access to real production data, but there are equally many that do not. Data masking secures enterprise data by eliminating sensitive information, while maintaining data realism and integrity. Many Fortune 500 companies have already integrated data masking into their PCI DSS and GLBA...

Maximizing Data Quality & Minimizing Risk for Banking Institutions

Does your organization use real customer profiles and statistics to drive marketing efforts or real employee data for salary/benefit analysis? Is your organization conducting one of these or other critical business activities that require data analysis? While these activities are critical to organizational success,...

Sponsored by MessageLabs, a Symantec company

Compliance Rules for Financial Firms and Institutions

In the current economic and cultural environment, the financial services industry is being particularly scrutinized with regards to legal and regulatory compliance. Learn more about the legal and regulatory compliance requirements targeting the Finance industry. Download this white paper to: Learn about...

IT in the Financial Sector - The Key to Thriving in a Challenging Economy

Today's financial sector landscape is changing fast, and technology executives are asked to keep up with changing business needs. In a challenging economy, IT staff must integrate diverse technologies from consolidated institutions, solve compliance issues, and somehow figure out a way to do it under budget with less...

Securing Retail POS Systems & Meeting PCI Compliance

There's something new in the air that retailers, especially the directors of information technology (IT) operations at the store, are starting to research and implement called "application whitelisting". This technology is being presented as the panacea for Payment Card Industry (PCI) compliance, and is being welcomed...