Page 3 - White Papers in Standards, Regulations & Compliance

Tokenization Broker for PCI DSS Compliance

This case study focuses on a large Canadian airline that covers all destinations in North America. It discusses the preparations the airline took towards Payment Card Industry Data Security Standard (PCI DSS) assessment and compliance. It explains how the airline built a system using Intel Expressway Tokenization...

PCI DSS Tokenization Buyer's Guide

In this paper, Payment Card Industry Data Security Standard (PCI DSS) expert and QSA Walter Conway takes you on a deep dive tour of tokenization techniques and their merits. He also demystifies tokenization by discussing use cases, comparing it to encryption and providing various alternatives for implementing...

Using PCI DSS Criteria for PII Protection

Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted standard that applies internationally to any organization that accepts, captures, stores, transmits or processes credit and debit card data. Many organizations, however, have mandates to protect Personally Identifiable Information (PII). In...

Managing Privileged Users on IBM i

Data breaches are more likely to come from inside your walls than outside. Without a way to manage user access, a privileged user can endanger your system at length before you discover it. To protect against that risk - and the chance of failing a PCI or SOX audit - you need to ensure privileged users can't abuse...

Leverage Continuous Monitoring to Achieve PCI-DSS Compliance

In the financial services industry, in-depth log analysis is essential to maintaining enterprise-wide security and meeting compliance requirements, including PCI-DSS regulations. In addition to being required to meet compliance standards, continuous monitoring of customers' financial data activity logs helps to detect...

Tokenization vs. Encryption: Options for Compliance

When do you want to use tokenization over encryption? How do these two technologies help you address security issues, and which is suitable for compliance? How do you decide which is better? You'll find the answers in this independently researched white paper written by data security analyst firm Securosis which helps...

Scanning Databases for Credit Card Information

Today's enterprise consists of numerous applications and a large number of them handle credit card data. As a result of standard processing, it is often the case that credit card data gets stored within file systems and databases in clear text - which poses a huge security risk. It is vital that all occurrences of...

Guide to Mapping Splunk Enterprise to PCI Requirements

Whether security data is coming from cloud-based operations, virtual systems, on-premise systems or third-party outsourced PCI services, Splunk Enterprise can be used to achieve PCI compliance and to improve an enterprise-level security posture. By monitoring all log data, services, processes and port activities,...

Data Protection & PCI Compliance for Dummies

This book provides an easy-to-understand introduction to protecting payment card data and a reference framework you can use as you work with architects, operations, analysts and assessors. This book covers not just the PCI DSS mandates themselves but also ways in which you can employ data protection techniques to...

PCI Compliance Best Practices for Power Systems running IBM i

Complying with PCI requirements is now a normal part of doing business in today's interconnected world. This white paper discusses how the PCI requirements apply to an IBM i server, and describes how PowerTech software can help you meet compliance guidelines. You'll learn:...

PCI Case Study: Managing Security

Recent updates to the Payment Card Industry Data Security Standard have merchants and banking institutions alike working to get up to speed on the latest demands. See how one merchant, Stewart's Shops, (formerly Stewart's Ice Cream Company), a popular chain of convenience stores throughout upstate New York and...

PCI Case Study: Attaining Compliance

In light of recent data breaches and an update to the standard itself, the Payment Card Industry Data Security Standard is of heightened importance to financial institutions and merchants alike. This exclusive case study focuses on Level 1 merchant Ritz Camera Centers, which shows how it has partnered with Bit9 to...