Page 15 - White Papers in Standards, Regulations & Compliance

PCI Compliance: Identifying Application Vulnerabilities

New Application Security Regulations: Build Compliance In History has shown: regulation follows breaches. With over 215 million data records exposed since 2005, the PCI Data Security Standard (PCI DSS) is fast becoming the standard of data security due care. This is effective guidance not only for financial services...

Achieving PCI Compliance in Complex Payment Networks

PCI Compliance Centers on Security and Authorized Access Today, all credit card merchants, service providers and retailers who process, store and transmit cardholder data have a fiduciary responsibility to protect that data and must comply with a diverse range of regulations and industry mandates. Payment networks...

Despite the Risks, FTP Use on the Rise in the Enterprise

New survey report reveals FTP usage on the rise despite bad press, data security breaches and compliance penalties inherent in its use. Learn more now. Global businesses require the free-flowing movement of information�from sensitive customer data to logistical process information�to thrive. No one piece of...

How to Use the PCI-DSS to Provide High Security for All Your Sensitive Data

If your company transfers, transmits or processes credit card data you fall under the Payment Card Industry Data Security Standard (PCI DSS). However although the PCI DSS was developed to protect credit card data, it is fast becoming a security standard for all sensitive company data such as patient records,...

Compliance and Privileged Password Management Considerations for Financial Institutions

Privileged access and control of administrative accounts for financial systems has long been an area of interest for agencies that are responsible for ensuring the integrity of banking systems, these can include: FRB, FDIC, OCC, NCUSIF, OTS and others. With the addition of growing SOX and PCI compliance concerns, it...

Solving Online Credit Fraud Using Device Identification and Reputation

The Internet has become a strategic customer acquisition and services distribution channel for financial services companies. Consumers are able to apply and obtain credit online, transfer funds, trade commodities and pay bills by simply clicking a few buttons from anywhere at any time. Unfortunately, in the online...

Embracing PCI - Making it work for you

With the recent rise in data breaches and identity thefts, implementing a sound information security program is no longer optional. Companies processing credit card information are encouraged to embrace and implement sound data protection strategies to protect the confidentiality and integrity of payment information....

Log Management & PCI

The PCI regulation has specific requirements around log data centralization, archiving, monitoring and reporting for security and auditing. Unfortunately organizations face a huge challenge meeting these requirements easily, efficiently and affordably. There are over eighteen distinct requirements related to log...

Stop Identity Theft at the Source: Build Security In

Since January 2005, over 167 million credit card numbers have been exposed due to security breaches. Many of the most damaging breaches were the result of hackers exploiting flaws in software. With the PCI Security Standard Council's regulations recently expanding to include specific mandates to assess software for...

Filling the Compliance Gap in Your Microsoft Environment

Is your Microsoft environment compliant? In his new Quest white paper "Filling the Compliance Gap in Your Microsoft Environment," Windows Security expert Randy Franklin Smith examines the importance of compliance in today's business world. Learn how you can ensure your data will be trusted in a court of law and...

PCI: How to Safeguard Customer Data Against Real Threats

You know - all merchants and service providers that store, process, or transmit credit card data must comply with the Payment Card Industry (PCI) Data Security Standards (DSS) mandates. Did you know? � Acquirers will be fined $5,000 to $25,000 a month for each merchant who does not validate PCI...

Implementing Detailed User-Level Auditing of UNIX and Linux Systems

Detailed user-level auditing for your UNIX and Linux environment is essential to achieving business-critical goals like regulatory compliance (e.g., GLBA, SOX, PCI, etc.), protection against insider attacks, and the ability to troubleshoot and diagnose system availability issues. Centrify's auditing, access control...

Achieving PCI Compliance for: Privileged Password Management & Remote Vendor Access

Management, control and audit of both shared/privileged account passwords and critical remote administrative and vendor access into the enterprise is mandatory in meeting many PCI and other regulatory and compliance requirements. This white paper will discuss the issues and challenges your enterprise can face in...

Banks Guard Against Data Breaches

Banks face the constant risk of unauthorized exposure of sensitive financial business data and customer information. The recent security breaches disclosed by retailers and other entities demonstrate the severity of this problem. Banks expose themselves to data breaches in many ways, including exposure via their...

Securing the Beast: Protecting the Extended Financial Enterprise - from Mainframes to Mobile Devices

Today, financial services IT organizations need to secure more than just the people, systems and infrastructure that sit inside their buildings. IT organizations must secure a variety of mobile user groups like executives, brokers, agents, consultants, and contractors. Additionally, with the growth of online account...