Linking your business to more business.

Caught between PCI-DSS compliance mandates and a shrinking budget?

Use our quick contact form above and we'll show you how to become PCI-DSS complient on a seriously tight budget!

Still looking for more conventional answers? Here are some possible resources for PCI-DSS...

http://chuvakin.blogspot.com/
vague but the implication was that computer encryption inside China would become essentially useless. disclosing the algorithms does NOT make encryption useless - they clarified that they mean ... hardware encryption with key embedded in a device and device available to... would become essentially useless. disclosing the algorithms does NOT make encryption useless - they clarified that they mean ... hardware encryption with key embedded in a device and device available to China which makes it pretty true The governments strongest tactic... highly debatable IMHO Today with current technology the Chinese government can hack into most anything even without information on specific encryption programs. my comment was no comment on this one - Many Chinese Web sites have these embedded bots and simply...

http://www.thecoverofnight.com/blog/
News and Information Online. Available httpwww.treasuryinstitute.orgblogindex.phpitemid227. 4. 2008 Annual Study Cost of a Data Breach 2009. Ponemon Institute. Online. Available httpwww.encryptionreports.com2008cdb.html. 5. J. Jones H1 2008 Desktop OS Vendor Report 2009. Technet.com. Blogs.Technet.com Online Available httpblogs.technet.comsecurityattachment3140955.ashx. 6. Microsoft Security Intelligence Report...

http://trustseals.wordpress.com/2009/02/10/pci-compliance-explained/
the process includes background checks on anyone who has access to credit card data. We can sit down with the encryption experts within your company or your database administrators and review how credit card information is processed how it enters into...

http://pcidss.wordpress.com/2009/02/13/cloud-computing-and-the-assumed-lack-of-s
of whatsoever The impact is we must establish secure communication technologies between points A and B we must place laptop encryption on portable devices we must establish certificates and authentication mechanisms to ensure the authorized persons and systems are communicating and...

http://pcianswers.com/2008/10/01/pci-dss-version-12-differences-and-updates/
notice the removal of mentions to SHA-1 Triple-DES and AES or any specific key length. The emphasis is on strong encryption something you can read about on the NIST website. Requirement 3.4.1 - Disk Encryption - references to Active Directory are...

http://blog.paymentsecuritypros.com/
to offset compliance costs. I was recently speaking with a client that has developed a very secure end to end encryption solution that removes much of the PCI compliance burden. When they presented the idea to one acquirer they were asked... members. SP Day is a 1-day unconference that takes PCI to the next level by talking about risk management end-to-end encryption data compromise trends and legal liability. Payment Security Industry Events SOURCEBoston - Cloud Compliance And Privacy March 11-13th - Conference...

http://www.gss.co.uk/news/article/5884/Heartland_data_breach_proves_PCI_complian
is fully exposed said Mark Bower director of information protection at Voltage.The only solution to eliminate this threat is end-to-end encryption said Bower.Only 2.4 of data breaches in 2008 had encryption or other strong methods of encryption according to an Identity... at Voltage.The only solution to eliminate this threat is end-to-end encryption said Bower.Only 2.4 of data breaches in 2008 had encryption or other strong methods of encryption according to an Identity Theft Resource Center report.It is obvious that the bulk of... this threat is end-to-end encryption said Bower.Only 2.4 of data breaches in 2008 had encryption or other strong methods of encryption according to an Identity Theft Resource Center report.It is obvious that the bulk of breached data was unprotected by encryption... encryption according to an Identity Theft Resource Center report.It is obvious that the bulk of breached data was unprotected by encryption the report said.The number of credit card details expo

http://newsteam.scmagazineblogs.com/2009/01/23/is-pci-working-maybe-maybe-not/
under the guidelines can prevent this type of attack.. But perhaps its time to revisit the need to require the encryption of all networks both public and private. Meanwhile Mike Rothman a former analyst argues that the council might want to...

http://www.thetechherald.com/article.php/200905/2849/Does-the-Heartland-breach-p
make security to bypass the more sophisticated the attacks become. Its a never ending arms race. Having said that implementing encryption over sensitive data where-ever possible and reasonable and complimenting those data level controls with monitoring where they cannot be implementing...

http://www.computerweekly.com/Articles/2009/01/26/234421/heartland-data-breach-p
articles by WarwickRelated Content CW Articles Web ContentFirst arrests in connection with Heartland data breach Heartland calls for payments industry encryption standard Airmiles sharpens security en route to PCI compliance Payment card security standard tightened Shops in rush to meet card...

http://beastorbuddha.com/2009/01/27/okay-ill-add-my-2-cents-to-the-heartland-bre
that nonconsole administrative access is encrypted by -observing an administrator log on to each system to verify that a strong encryption method is invoked before the administrators password is requested -Reviewing services and parameter files on systems to determine that Telnet...

http://www.secureconsulting.net/2009/02/pci_dss_v12_in_a_nutshell.html
in storage using hashing truncation index tokens and pads or strong encryption using good key management practices. If disk encryption is used then logical access must be independent of the OS without the keys tied to user accounts. Access...

http://www.pciknowledgebase.com/index.php?option=com_banners&task=click&bid=11
for both coding errors including buffer overflows and race conditions as well as the design flaws such as lack of encryption. Organizations face then a two-pronged challenge The security need to fix vulnerable code and the business-level need to prove compliance....

http://www.pciknowledgebase.com/index.php?option=com_banners&task=click&bid=19
drastically reduce the complexity and cost of achieving PA-DSS compliance. Read MoreCoalfire works with Vormetric to improve database security and encryption management Through our work with Vormetric customers we have seen strong success in consolidating data security and encryption management. We... security and encryption management Through our work with Vormetric customers we have seen strong success in consolidating data security and encryption management. We are pleased to see Vormetric continuing to lead the industry by consolidating their best practices for Oracle and...

http://blog.tenablesecurity.com/2008/10/pci-dss-plugins.html
than or equal to 4 Detection of any Cross Site Scripting or SQL Injection vulnerabilities Older versions and mis-configured SSL encryption Because of the logic of our plugins a scanned system will be in one of four states It should be...

http://www.voltage.com/pci/index.htm
DescriptionVoltage Security provides the worlds easiest to use email encryption and database encryption software that can be implemented 5 times faster than other products. Solutions include email encryption for desktops gateways and mobile... faster than other products. Solutions include email encryption for desktops gateways and mobile devices key management and database and application encryption. Voltage solutions are built on innovative cryptography - Identity-Based Encryption IBE and Format-Preserving Encryption FPE. ... DescriptionVoltage Security provides the worlds easiest to use email encryption and database encryption software that can be implemented 5 times faster than other products. Solutions include email encryption for desktops gateways and mobile... faster than other products. Solutions include email encryption for desktops gateways and mobile devices key management and database and application encryption. Voltage solutions are built on innovative cryptography - Identity-Based Encryption IBE and Format-Preserving Encryption FPE.KeyWordsvoltage email encryption database encryption software... solutions are built on innovative cryptography - Identity-Based Encryption IBE and Format-Preserving Encryption FPE.KeyWordsvoltage email encryption database encryption software file encryption key management information encryption data protection secure email secure messaging encryption platform identity-based encryption format-preserving encryption email security document encryption... innovative cryp