Page 15 - White Papers in Standards, Regulations & Compliance

4 Steps to Financial Data Security Compliance

Government and industry legislation such as Gramm-Leach-Bliley, PCI-DSS, state Financial Data Privacy Acts, amongst others require that financial organizations ensure certain levels of security to protect sensitive information from compromise, unauthorized access, interception or corruption. However, the challenge is...

Meeting the Challenges of Roles-based Access Governance

One of the biggest challenges in managing financial service organizations is the complexity of controlling user access to information resources. Some of these organizations have attempted to implement roles-based systems to address these challenges, but real-world experience have shown that unless roles fit into a...

Online Transactions: A Guide to Protecting Consumers

Read this white paper to learn about: Insight on two-factor authentication credentials to help you decide on the best choice for your customer-base. Fortune 500 companies are increasingly discovering that stronger authentication options can result in decreased fraud costs, improved customer loyalty, a...

Regulation of Electronic Communications In the Financial Services Industry

No other industry faces governmental compliance scrutiny like the financial-services firms do. The increased number and frequent revision of federal, state, local, and international rules has created an unprecedented burden on companies to comply. Companies affected include: Brokers/dealers Mutual fund...

The State of Banking Information Security 2008 - Survey Executive Overview

Exclusive Survey Uncovers Disconnect in Efforts to Manage Vendors, Educate Customers Welcome to the Executive Overview of The State of Banking Information Security 2008 survey. Newly-compiled results reveal valuable insights on a variety of topics, ranging from reporting relationships to risk management. Top...

Winning the Battle Against Insider Threat

Ten Steps for Safeguarding Critical Data PCI and GLBA require that you guard critical customer and cardholder data. But to manage threats successfully while meeting these compliance challenges, organizations need a security strategy that can successfully do battle with inside as well as outside threats. Now, there is...

Maximum Security Online: Best Practices for Designing the Ultimate online Security Strategy

Best practices to detect and prevent Internet fraud and identity theft while ensuring compliance Nearly 2 million customers have had their checking accounts compromised in the last 12 months, resulting in upwards of $2B in losses for financial institutions (According to Gartner Research). As online customer...

PCI Compliance: Identifying Application Vulnerabilities

New Application Security Regulations: Build Compliance In History has shown: regulation follows breaches. With over 215 million data records exposed since 2005, the PCI Data Security Standard (PCI DSS) is fast becoming the standard of data security due care. This is effective guidance not only for financial services...

Achieving PCI Compliance in Complex Payment Networks

PCI Compliance Centers on Security and Authorized Access Today, all credit card merchants, service providers and retailers who process, store and transmit cardholder data have a fiduciary responsibility to protect that data and must comply with a diverse range of regulations and industry mandates. Payment networks...

Despite the Risks, FTP Use on the Rise in the Enterprise

New survey report reveals FTP usage on the rise despite bad press, data security breaches and compliance penalties inherent in its use. Learn more now. Global businesses require the free-flowing movement of information�from sensitive customer data to logistical process information�to thrive. No one piece of...

How to Use the PCI-DSS to Provide High Security for All Your Sensitive Data

If your company transfers, transmits or processes credit card data you fall under the Payment Card Industry Data Security Standard (PCI DSS). However although the PCI DSS was developed to protect credit card data, it is fast becoming a security standard for all sensitive company data such as patient records,...

Compliance and Privileged Password Management Considerations for Financial Institutions

Privileged access and control of administrative accounts for financial systems has long been an area of interest for agencies that are responsible for ensuring the integrity of banking systems, these can include: FRB, FDIC, OCC, NCUSIF, OTS and others. With the addition of growing SOX and PCI compliance concerns, it...

Solving Online Credit Fraud Using Device Identification and Reputation

The Internet has become a strategic customer acquisition and services distribution channel for financial services companies. Consumers are able to apply and obtain credit online, transfer funds, trade commodities and pay bills by simply clicking a few buttons from anywhere at any time. Unfortunately, in the online...

Embracing PCI - Making it work for you

With the recent rise in data breaches and identity thefts, implementing a sound information security program is no longer optional. Companies processing credit card information are encouraged to embrace and implement sound data protection strategies to protect the confidentiality and integrity of payment information....

Log Management & PCI

The PCI regulation has specific requirements around log data centralization, archiving, monitoring and reporting for security and auditing. Unfortunately organizations face a huge challenge meeting these requirements easily, efficiently and affordably. There are over eighteen distinct requirements related to log...