Req 2.2 mandates the need to verify that system configuration standards are consistent with industry-accepted hardening standards. NNT is a CIS-Certified Vendor and as such provides pre-built device hardening templates derived from the CIS Benchmarks to audit for any vulnerabilities present.
In the “Six steps to get compliant – and stay compliant” video overview we focused on configuration hardening, file-integrity monitoring and endpoint security. But the PCI DSS has many more layers of security measures. One of the more challenging elements is Requirement 10. Event Logs contain detail-rich information that can help pre-empt security incidents. In the event that the unthinkable happens and you are subject to a breach, an event log history can be used to forensically analyze the origin and method of attack, helping to improve security measures for the future.
NNT Log Tracker provides an Enterprise-Class SIEM solution to all PCI DSS requirements for logging but this video shows how easy and accessible the technology is and how it can be used in any size of organization.
The PCI Data Security Standard calls for a range of security measures, but beyond the use of firewalling, intrusion protection systems and anti-virus software, the understanding of the requirements and responsibilities of the merchant are often poorly understood.
This guide simplifies the balance of PCI DSS measures to just four technology areas
- File Integrity monitoring
- Event Log centralization
- Security Vulnerability scanning for device hardening
- Change Management process
Understanding and implementing measures to address these four areas will make any QSA happy and get you compliant – and keep you compliant – in no time at all.
Join NNT for an insight to the newly announced PCI DSS Version 3.0 and see how PCI security best practices can be operated in just ten minutes a day in this new, 30 minute webinar.
New Net Technologies (NNT) is now part of Netwrix