Linking your business to more business.

Caught between PCI-DSS compliance mandates and a shrinking budget?

Use our quick contact form above and we'll show you how to become PCI-DSS complient on a seriously tight budget!

Still looking for more conventional answers? Here are some possible resources for PCI-DSS...

http://www.technorati.com/search/http://rationalsecurity.typepad.com/blog/2008/1
Basics Search Tags Blogs Photos Videos Favorites Channels Support Forum Popular in Movies Watching WatchmenSearch 17 blog reactions to rationalsecurity.typepad.comblog200810please-help-me-i-need-a-qsa-to-assess-pcidss-compliance-in-the-cloud.html Try filtering your results Search Posts Search Blogs Search Photos Search Videos entire post tags only any authority a little... ever taken security seriously. International Challenges in PCI Security from CSO Magazine. A VERY interesting discussion on PCI in the cloud MUST read Please Help Me I Need a QSA To Assess PCIDSS Compliance In the Cloud... and then MUST... ever taken security seriously. International Challenges in PCI Security from CSO Magazine. A VERY interesting discussion on PCI in the cloud MUST read Please Help Me I Need a QSA To Assess PCIDSS Compliance In the Cloud... and then MUST read... Update Seems that while I was heads-down with a product launch I missed Christofer Hoffs post on PCI virtualization and clouds . Just to

http://www.tssci-security.com/archives/2009/02/12/post-to-webappsec-mailing-list
have to agree with you on this point. Im just trying to explain where the industry is headed. Also see cloud security the biggest oxymoron the technology industry has ever heard. If security is the removal of all assets from all...

http://www.itcomplianceandcontrols.com
issues for customers of these services and the liability for the service provider What are the mechanisms for moving to cloud computing and who gets you there What are the business opportunities for entrepreneurs looking to participate in this newly forming...

http://pcianswers.com/2008/11/03/cloud-computing-security-and-pci/
by Michael Dahn Posted in Compliance PCI DSS A few days ago I began a conversation with a friend about cloud computing security because I wanted to know the answers to some pressing questions. What I learned from this conversation is... only properly configured technology matters. So that brings us back to the question asked earlier if a company that uses cloud computing can be PCI compliant. To explain this we first must explore the historical context of the question. Last year... reality is that virtualization can be compliant as long as its properly configured and managed. Today people are saying that cloud computing cannot be used because of a requirement for third party contracts which they claim will never be achieved with... do with the List of service providers and other entities with which the company shares cardholder data. Ok well with cloud computing we are not really giving out cardholder data as much as we are potentially giving access to cardholder data.... But does the

http://www.scmagazineus.com/IronMail/Review/532/
exploited House hearing U.S. in dangerous cybersecurity state Security during layoffs Inside out Cloud security Is it raining in the cloud Patch finally here for critical Adobe zero-day Googles glitch in the cloud InfoSec 23 percent of users fall for spear... out Cloud security Is it raining in the cloud Patch finally here for critical Adobe zero-day Googles glitch in the cloud InfoSec 23 percent of users fall for spear phishing P2P legislation would build security awareness among usersConficker worm variant kills...

http://earlybert.com/2008/11/09/pci-data-security-standard-en-virtualisatie/
standaard nu wel of niet rekening moet houden met virtualisatie. En dezelfde vraag geldt voor zaken als outsourcing hosting en cloud computing. Chris Hoff van Rational Survivability gooide olie op het vuur met het gefingeerde verzoek om hulp bij zijn transactieverwerking...

http://www.icmpecho.com/2008/11/04/pci-dss-whats-in-the-cloud/
are almost non-existent. A subject similar to this has been of interest for me before as Panda MalwareRadar is a cloud service where files deemed interesting are fingerprinted. Those fingerprints are then communicated to our Collective Intelligence servers in order to... Panda Labs Panda Research PCM International Pirates of Stockholm Piratpartiet Ravenna Rick Falkvinge Rickard Olsson Rosetta Sten Sandra Grosse Tag cloud vervakning 1.2 a1 acer anti-malware aspire one censorship censur christmas compliance copyright eu fascism fra infection integrity internetdagarna ipred1 linpus... comment Comments feed for this article Trackback linkhttpwww.icmpecho.com20081104pci-dss-whats-in-the-cloudtrackbackNovember 5 2008 at 514 am Mike Mikes avatarDont forget the followup PCI cloud computing post httppcianswers.com20081103cloud-computing-security-and-pciName required Email required not displayed WebsiteYour comment ...

http://www.mckeay.net/2008/11/02/pci-compliance-in-the-cloud-get-it-in-writing/
such a time as Amazon makes a compliant infrastructure. The same needs to be said of any of the other cloud vendor its not just EC2. Afterward Chris appended the post to say that he got exactly the response he expected.... Chris in saying this is a topic that needs more discussion but to educate businesses and help them realize that cloud computing is no more a panacea for all their PCI woes than any other form of virtualization is. Youre taking... difference between a rack of servers and a rack of servers with virtualization example illustrates an incredibly narrow definition of cloud computing and is a dangerous position to take. If you need to understand the differences in those two environments perhaps... of patching and vulnerability concerns to be worried about. Rather than reducing your stress levels and potential to be compromised cloud computing will probably raise it to a new level.Youre arguingdefending a group of folks who dont even properly address wireless... were both c

http://rationalsecurity.typepad.com/blog/2008/10/please-help-me-i-need-a-qsa-to-
runs on Amazons EC2. All my data is hosted outside of my direct stewardship. I dont own anything. Since the cloud hides all the infrastructure and moving parts from me I dont know if I meet any of the following PCI... this tidal wave has been rushing at us for at least 3-5 years. If you believe the uptake of cloud computing were blindly hurdling over the challenges that virtualized internally-owned infrastructure brings and careening headlong down a path to cloud... cloud computing were blindly hurdling over the challenges that virtualized internally-owned infrastructure brings and careening headlong down a path to cloud computing that leaves us in non-compliance. The definition of what a service provider means and how they interact with the... to assess my infrastructure and operations for PCIDSS compliance. Oh I forgot to mention. All my infrastructure is in the cloud. Its all virtualized. It runs on Amazons EC2. All my data is hosted outside of my direct stewardship. I dont... mee

http://www.deb.radcliff.com/
no wonder theyre getting clobbered. See more Read Radcliffs Security Chief blog about home network security See moreHead in the clouds The latest craze in cloud computing shows great promise but it is introducing a host of new security issues. SC...

http://www.compliancefocus.com
Time vs. Continuous Compliance By Jim Hietala 02262009 Whats the value of a laptop By Jim Hietala 0222009 Compliance and cloud computing By Jim Hietala 01292009 International data privacy day By Jim Hietala 01282009 Another day another 100 million records By...

http://nickcoblentz.blogspot.com/2009/02/pci-compliance-and-cloud-computing.html
assessor must evaluate the effectiveness of network segmentation controls and then make a decision based on these results. In a cloud computing environment there are both physical and virtual infrastructure devices that provide segmentation. Amazons Security Whitepaper discusses the following components... and other similar network controls. Organizations can easily fulfill these requirement as they apply to the virtual infrastructure within the cloud using the provided security groups Hypervisor firewall and other similar features. The unanswered question is to what extent the requirement... or physical network devices where data or servers could potentially be located. Takeaway It is unclear to what degree the cloud providers physical architecture will need to be assessed in addition to the organizations virtual infrastructure. Requirement 2 Do not use... leveraging SSL to securely send sensitive data between components. Takeaway This requirement can be satisfied without the coopera