For many organizations, compliance with data security standards doesn’t seem to be getting easier. Compliance efforts often compete with projects that address information security threats and vulnerabilities, and these efforts often lose out in the battle for resources and funding.
However, in any industry where compliance is an issue, organizations cannot afford to ignore it. Sooner or later, they are going to be required to demonstrate that they have the appropriate IT-related internal controls in place to minimize the risk of fraud or data breach.
You can get ahead of the game by understanding your control objectives and selecting solutions that ensure consistency of foundational, high-performance processes like managing user identities, roles, group memberships, and related attestation reviews. Effectively managing user identities and entitlements satisfy multiple control objectives, thereby enabling you to achieve and demonstrate compliance while also automating compliance-related tasks.
In this paper, you’ll learn about IT security compliance for the Payment Card Industry Data Security Standard (PCI DSS) from an auditor’s perspective. Although PCI DSS represents only a portion of the data security compliance obligations faced by most organizations, it is one of the most significant, especially in light of recent, well-publicized financial security breaches.
