White Papers in Standards, Regulations & Compliance

Sponsored by Proofpoint

Discovering and Reporting Fraudulent Accounts

Fraudulent social media brand pages are often used for phishing, malware, and other scams which negatively impact your customers and damage your brand reputation. How can organizations take action against these accounts? Download this whitepaper and learn how to: Identify fraudulent accounts; Create an organized...

Sponsored by Proofpoint

Top 5 Corporate Social Media Risks and How to Protect Your Firm

The FBI, Gartner, and many other security analysts cite social media as one of the fastest growing security threats. That is why it is important for security teams at organizations with a significant social media presence to gain an understanding of this new attack surface and develop a plan to protect the...

Sponsored by Proofpoint

How to Stop Social Media Hacks

Little has been done to address the social media hacking problem despite continued headlines. Most organizations lack the protective countermeasures or the expertise to mitigate risk and respond to incidents. Few companies know how to re-gain control after an account compromise or how to prevent an attack in the first...

Sponsored by Proofpoint

7 Steps to Reduce Social Account Takeover Risk

Social media account takeovers have become synonymous with embarrassing headlines that feature well-known companies and figures. If your organization has a prominent account, cyber attackers will see you as a ripe target. Download this whitepaper and learn: How these takeovers are possible; Why the complexity of...

Scanning Databases for Credit Card Information

Today's enterprise consists of numerous applications and a large number of them handle credit card data. As a result of standard processing, it is often the case that credit card data gets stored within file systems and databases in clear text - which poses a huge security risk. It is vital that all occurrences of...

Automated, Continuous PCI Compliance

This white paper details how Tripwire IT security and compliance automation solutions help keep the IT infrastructure in a continuously PCI-compliant - and secure-state. Tripwire Enterprise does this with a compliance policy for PCI, file integrity monitoring, real-time analysis of change and easy access to...

Reducing the Cost of Achieving PCI Compliance

Of all the compliance regulations, mandates and guidelines, you're most likely to encounter PCI. Any vendor, organization, entity, group, business, etc., that accepts and processes credit cards falls under the PCI requirements standard and is subject to its audit cycles. PCI DSS covers a range of physical and...

Sponsored by Tenable Network Security, Inc.

Real-Time Compliance Monitoring

Leveraging Asset-Based Configuration and Vulnerability Analysis with Real-Time Event Management It is crucial to monitor for compliance in a manner as close to real time as possible to ensure the organization does not drift out of compliance over time. The greater the gap between monitoring cycles, the more likely...

Five Ways to Reduce Your IT Audit Tax

Most organizations spend 30-50% more on compliance than they should 1. No matter the industry, with regulations such as GLBA, PCI, FISMA, SOX, and other regulations and mandates, it seems nobody is immune to scrutiny - but why spend so much more than what is necessary? In order to reduce the burden of an IT audit,...

Meet PCI DSS Compliance Requirements for Test Data with Data Masking

Whether you are working towards your first or next PCI DSS audit, you know that compliance isn't scored as a one or a zero - it's measured on a sliding scale. You've successfully argued for adoption of various security technologies to protect cardholder data, including encryption and firewalls, and have come to...

Six Ways to Reduce PCI DSS Audit Scope by Tokenizing Cardholder Data

Merchant banks, card processors and payment gateways are all seeking ways to simplify and reduce the scope of the Payment Card Industry's Data Security Standard (PCI DSS) compliance by shrinking the footprint where cardholder data is located throughout their organization. By reducing the scope, these organizations can...

A Focus on Security Yields Compliance for Free

Over the years, security and compliance experts at ReymannGroup have performed numerous compliance reviews and risk assessments. Through these engagements and other forums, we have engaged hundreds of executives in discussions about the need for a comprehensive and strategic approach to data security and compliance....

Data Masking - Strengthening Data Privacy & Security for Banking Institutions

Many business activities require access to real production data, but there are equally many that do not. Data masking secures enterprise data by eliminating sensitive information, while maintaining data realism and integrity. Many Fortune 500 companies have already integrated data masking into their PCI DSS and GLBA...

Securing Retail POS Systems & Meeting PCI Compliance

There's something new in the air that retailers, especially the directors of information technology (IT) operations at the store, are starting to research and implement called "application whitelisting". This technology is being presented as the panacea for Payment Card Industry (PCI) compliance, and is being welcomed...

PCI DSS Compliance in the UNIX/Linux Datacenter

PowerBroker from BeyondTrust granularly controls access to systems and cardholder data, creates comprehensive logs and audit trails, and has an Entitlement Report that shows auditors that you have created a baseline to assess accountability. This paper discusses how creating a secure access control...