Similar Searches

  • The Right Steps to Safeguarding Credit Card Data (March 18, 2009)

    It’s beginning to feel like every other day that we learn about yet another data breach, where credit card information or other sensitive consumer data is compromised. An air of complacency has settled in; we are becoming almost immune to

  • The Dangerous Out-Of-Scope PCI Charade (November 17, 2009)

    Dominating many discussions over the last few weeks in payment security circles has been speculation over what the PCI Council, Visa and others will decide about declaring some types of data out-of-scope for PCI purposes. Getting much less attention

  • Security Choices, Mobile Style (October 21, 2009)

    Given that payment security is always a matter of strategic and sometimes philosophical choices, it shouldn’t surprise anyone that that latest hot trends in payment—mobile commerce and in-store mobile

  • The Art Of Compromise Without Being Comprised (October 14, 2009)

    Security management has always been about making choices. With so many layoffs and urgent Web projects for the imminent holiday season, how much time can your team justify spending checking log activity reports, searching to see if any cyberthief visited

  • I Want an ATM Card (May 3, 2010)

    When I was a child, I was fascinated by ATM machines. I had a savings account which my mother would deposit money regularly and I waited for the day that I could raid the account with the ATM card for

Related News

  • The Right Steps to Safeguarding Credit Card Data (March 18, 2009)

    It’s beginning to feel like every other day that we learn about yet another data breach, where credit card information or other sensitive consumer data is compromised. An air of complacency has settled in; we are becoming almost immune to

  • The Dangerous Out-Of-Scope PCI Charade (November 17, 2009)

    Dominating many discussions over the last few weeks in payment security circles has been speculation over what the PCI Council, Visa and others will decide about declaring some types of data out-of-scope for PCI purposes. Getting much less attention

  • Security Choices, Mobile Style (October 21, 2009)

    Given that payment security is always a matter of strategic and sometimes philosophical choices, it shouldn’t surprise anyone that that latest hot trends in payment—mobile commerce and in-store mobile

  • The Art Of Compromise Without Being Comprised (October 14, 2009)

    Security management has always been about making choices. With so many layoffs and urgent Web projects for the imminent holiday season, how much time can your team justify spending checking log activity reports, searching to see if any cyberthief visited

  • I Want an ATM Card (May 3, 2010)

    When I was a child, I was fascinated by ATM machines. I had a savings account which my mother would deposit money regularly and I waited for the day that I could raid the account with the ATM card for

Latest News

Heat Wave Brings Spam

Internal Revenue Service Identity Theft Scams

Gmail phishing spam making the rounds

Strong passwords: deja vu all over again

Elements of Optimized Security: Automated Compliance

It’s Not Just For Card Data Any More

With all of the recent fuss about PCI requirements and how to protect payment cards, many companies have opted to take a far too narrow view of data protection. The PCI rules are absolutely designed to only apply to payment cards, but the same common-sense security guidelines will also dramatically help the security of CRM databases, personnel files, E-mail servers, payroll details, and even the full contents of your Web site.

Overworked IT executives suffering from staff cuts find checklist security quite comforting. The checklist mentality says that nothing should be done that isn’t mandated. And there are no external rules protecting data, beyond payment card, health-related information and some investment data. Is this wise?

This month, a frightening answer to that question came in the form of an E-mail exchange that a reader enjoyed. The reader—a security consultant—got a panicked call seeking a forensic expert. A large amount of important data had been stolen and they hadn’t been doing backups of that content. Even worse, they couldn’t even try and piece together what the intruders had stolen because of a logging problem. To quote the victim: “We can’t recover it, because it’s wasn’t backed up, and it wasn’t logging because it wasn’t on the part of the SAN where logging occurs.” Uh-oh.

Our reader said that he figured the data couldn’t have been close to mission-critical, given

Continue reading...


Source: McAfee Security Insights Blog

  • The Right Steps to Safeguarding Credit Card Data (March 18, 2009)

    It’s beginning to feel like every other day that we learn about yet another data breach, where credit card information or other sensitive consumer data is compromised. An air of complacency has settled in; we are becoming almost immune to

  • The Dangerous Out-Of-Scope PCI Charade (November 17, 2009)

    Dominating many discussions over the last few weeks in payment security circles has been speculation over what the PCI Council, Visa and others will decide about declaring some types of data out-of-scope for PCI purposes. Getting much less attention

  • Security Choices, Mobile Style (October 21, 2009)

    Given that payment security is always a matter of strategic and sometimes philosophical choices, it shouldn’t surprise anyone that that latest hot trends in payment—mobile commerce and in-store mobile

  • The Art Of Compromise Without Being Comprised (October 14, 2009)

    Security management has always been about making choices. With so many layoffs and urgent Web projects for the imminent holiday season, how much time can your team justify spending checking log activity reports, searching to see if any cyberthief visited

  • I Want an ATM Card (May 3, 2010)

    When I was a child, I was fascinated by ATM machines. I had a savings account which my mother would deposit money regularly and I waited for the day that I could raid the account with the ATM card for

Write a Comment

Copyright © 2010 The Security Blog. All rights reserved.