PRO+ Premium Content/Information Security
Access your Pro+ Content below.
Ping: Josh Seeger
This article is part of the Information Security issue of February 2007
Few things inspire fear and loathing like regulatory compliance. Josh Seeger, CIO of Tribune Broadcasting, faced a hugely complex task in ensuring the company met the requirements of the Payment Card Industry Data Security Standard. His experience showed that, while compliance can be burdensome, it can also serve as a window into your network's security posture. JOSH SEEGER PCI compliance can be difficult even for small organizations. How did you go about the process in such a large company? We have a massively distributed organization with dozens of business units. Because the company is so distributed and there are many areas where the use of credit cards is a part of our normal business, we needed to get the most efficient method for complying with PCI. We have a small but highly skilled group of corporate IT specialists, so we needed to find a way to use as little of their time as possible. A lot of the credit card activity is contained within small separated segments of our network infrastructure. Since many other units are...
Access this PRO+ Content for Free!
Features in this issue
-
Unified threat management: Fortinet's FortiGate 3600A
Fortinet's FortiGate 3600A
-
Security system products latest releases: Archsight, Finjan, Sophos
Get information, such as price, features, protection and support, on the most recently released versions of security products, such as Archsight logger and Sophos Security Suite.
-
Vulnerability scanning review: PatchLink's PatchLink Update 6.3
PatchLink's PatchLink Update 6.3
-
New tools target ISPs to stop botnets
Security vendors are bringing the botnet fight to ISPs and carriers.
-
Intrusion Prevention: Juniper Networks' ISG 2000 with IDP
Juniper Networks' ISG 2000 with IDP
-
Information security blueprint for architecture and systems
A formalized security architecture diagrams how you should handle the changing threat and regulatory environments.
-
HIPAA privacy records and guidelines: How to achieve compliance
Learn how to achieve compliance with HIPAA certification and learn to avoid and fix risks with password security, privacy regulations, records, guidelines.
-
At Your Service: February 2007 managed security services news
-
-
Going Global
Organizations sending data abroad must be prepared to comply with a slew of privacy and security regulations.
Columns in this issue
-
Ping: Josh Seeger
Josh Seeger
-
Layer8: Is risk management for real?
Fad or For Real?
-
Editor's Desk: Can someone call an exterminator?
A Bug's Life