PCI Compliance: Learn Solutions To Help Your Organization Comply

How NetIQ Helps Address the
Toughest PCI Challenges July, 2007
The Payment Card Industry Data Security Standard revision (PCI Contents DSS v1.1) was published on September 7, 2006. As a result of low compliance levels with the initial PCI release and the increase in high-profile credit card data theft cases, this revision Introduction ........................... 3 was introduced with a timeline for merchants to apply the appropriate level of security controls to protect customer data. Assess PCI Compliance with NetIQ Built-In Templates ..... 4 Industry experts expect that PCI DSS v.1.1 will drive compliance levels to double between December, 2006 and Demonstrate PCI Compliance December, 2007 (from 33% to 66%, respectively). Additionally, with NetIQ Reporting ........... 5 state legislatures are hoping to do their part to force compliance. Monitor User Activities and At the time of this publication, Massachusetts is debating and System Changes with NetIQ. 6 Texas is considering codifying PCI into law.
Manage and Review Log Files Any organization that accepts credit cards or handles credit card with NetIQ.............................. 6 information is subject to PCI compliance. This includes retailers, banks, and others that process a significant number of NetIQ Solutions Overview .... 7 credit card transactions daily. Higher data processing levels translates into greater audit scrutiny. Mapping NetIQ Solutions to PCI .......................................... 9 NetIQ solutions can help you establish and ensure the requirements of PCI DSS v1.1 are met on a continuing basis. In Summary .............................. 11 this white paper you will learn more about the key challenges of PCI DSS v1.1 and how NetIQ Security Management, About NetIQ Corporation .. 11 Configuration Control and Enterprise Administration solutions help you demonstrate PCI compliance. THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON-DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY SET FORTH IN SUCH LICENSE AGREEMENT OR NON-DISCLOSURE AGREEMENT, NETIQ CORPORATION PROVIDES THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW DISCLAIMERS OF EXPRESS OR IMPLIED WARRANTIES IN CERTAIN TRANSACTIONS; THEREFORE, THIS STATEMENT MAY NOT APPLY TO YOU. This document and the software described in this document may not be lent, sold, or given away without the prior written permission of NetIQ Corporation, except as otherwise permitted by law. Except as expressly set forth in such license agreement or non-disclosure agreement, no part of this document or the software described in this document may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, or otherwise, without the prior written consent of NetIQ Corporation. Some companies, names, and data in this document are used for illustration purposes and may not represent real companies, individuals, or data. This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein. These changes may be incorporated in new editions of this document. NetIQ Corporation may make improvements in or changes to the software described in this document at any time. © 1995-2007 NetIQ Corporation, all rights reserved. U.S. Government RestrITed Rights: If the software and documentation are being acquired by or on behalf of the U.S. Government or by a U.S. Government prime contractor or subcontractor (at any tier), in accordance with 48 C.F.R. 227.7202-4 (for Department of Defense (DOD) acquisitions) and 48 C.F.R. 2.101 and 12.212 (for non-DOD acquisitions), the government's rights in the software and documentation, including its rights to use, modify, reproduce, release, perform, display or disclose the software or documentation, will be subject in all respects to the commercial license rights and restrITions provided in the license agreement. Check Point, FireWall-1, Provider-1, SiteManager-1, and VPN-1 are trademarks or registered trademarks of Check Point Software Technologies Ltd. ActiveAgent, ActiveAnalytics, ActiveAudit, ActiveReporting, ADcheck, AppAnalyzer, Application ... [download for more]