PCI Data Loss Prevention for PCI Compliance

PCI COMPLIANCE

What is PCI?

In an effort to standardize data security measures on a global basis an organization known as the Payment Card Industry (PCI) was developed. American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International were all members of the PCI organization. Together they outlined the Payment Card Industry Data Security Standard (PCI DSS), a list of requirements designed to enhance payment account data security. These requirements mandate that organizations maintain and build the following: a secure network, cardholder data protection, a vulnerability management program, an information security policy, regularly monitored and tested networks, and the implementation of strong access control measures. This comprehensive standard is intended to help organizations proactively protect customer account data.

Basic rules on PCI compliance:

PCI compliance includes merchants and service providers who accept, capture, store, transmit or process credit and debit card data.
As of September 2006, PCI 1.1 includes 12 major requirements. A single violation of any of the requirements can trigger an overall non-compliant status.
Each non-compliant incident will result in steep fines, suspension and revocation of card processing privileges.

GTB Technologies' PCI compliance Data Loss Prevention Solution - Accuracy on all ports and protocols:

GTB's rule manager contains a pre-defined PCI compliance rule, which defines PCI secure data as anything containing Personal Account Number (PAN) and a name or address
Personal Account Numbers (PAN) stored within the network and endpoint devices are discovered, exposed and protected
All outbound traffic across all network protocols is monitored for secure PCI data, with nearly 100% detection ratio and zero false positives
PCI Data is prevented from being saved on removable media devices, such as: USB, CD/DVD or iPods
GTB provides detailed PCI reports and role-based options that support auditing requirements

Should Your Organization be concerned about PCI Compliance?

All organizations, merchants and third party service providers who store, process and/or transmit credit/debit card data are subject to the Payment Card Industry Data Security Standard. As of January 2008, PCI compliance is a requirement and organizations that are non-compliant are subject to large fines and risk losing their ability to process credit card transactions until PCI compliance is achieved.