Dark Reading
Protect The Business - Enable Access
Click here for more info!
Trend Micro And HyTrust Team To Advance PCI Compliance Reporting For VMware And Cloud Environments
Companies will provide integrated reporting tools that reduce audit response times
"As with any new technology, virtualization poses unique challenges to the PCI DSS compliance process in cardholder data environments," said Tom McAndrew, vice president of professional services at Coalfire. "Trend Micro and HyTrust together are making quick work of tracking relevant information for both the applications and system components, and integrating reporting into a single dashboard."
Trend Micro(TM) Deep Security solution provides advanced security and protection for servers deployed across physical, virtual or cloud infrastructures. It helps companies prevent data breaches while ensuring business continuity. Deep Security's modules include Firewall/Deep Packet Inspection, Intrusion Detection and Prevention, File Integrity Monitoring, Agentless Anti-malware and Advanced Monitoring, as well as configurable log inspection capabilities. The entire solution is dynamic, centrally managed and supports multiple compliance standards including PCI DSS, FISMA and HIPAA.
HyTrust's solution ensures control, security, management and compliance for virtual infrastructures, and provides consolidated PCI DSS reporting in conjunction with Trend Micro's Deep Security platform.
"Trend Micro Deep Security is highly integrated and optimized for VMware vSphere (TM) environments," said Narsi Kodukula, senior director of data center and cloud security solutions, Trend Micro. "The combination of Trend Micro and HyTrust's solutions provide customers with the assurance that they can virtualize their applications onto VMware vSphere while maintaining ongoing visibility into critical PCI DSS compliance metrics."
Trend Micro Deep Security and the HyTrust appliance with PCI DSS compliance tools are available now by contacting sales@trendmicro.com and sales@hytrust.com.
Additional Resources
-- HyTrust and Trend Micro Solution Brief: Complete Compliance for PCI -- HyTrust and Trend Micro white paper -- VMware blog: How virtualization affects PCI Compliance -- PCI Standards Security Standards Council's virtualization guidelines report issued June 2011
About HyTrust
HyTrust(r), headquartered in Mountain View, CA, is the leader in policy management and access control for virtual infrastructure. HyTrust empowers organizations to virtualize more--including servers that may be subject to compliance--by delivering enterprise-class controls for access, accountability, and visibility to their existing virtualization infrastructure. The Company is backed by top tier investors Granite Ventures, Cisco Systems, Trident Capital, and Epic Ventures; its partners include VMware, Symantec, Citrix, RSA, and Intel Corporation.
About Trend Micro
Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global cloud security leader, creates a world safe for exchanging digital information with its Internet content security and threat management solutions for businesses and consumers. A pioneer in server security with over 20 years' experience, we deliver top-ranked client, server and cloud-based security that fits our customers' and partners' needs, stops new threats faster, and protects data in physical, virtualized and cloud environments. Powered by the industry-leading Trend Micro(TM) Smart Protection Network(TM) cloud security infrastructure, our products and services stop threats where they emerge - from the Internet. They are supported by 1,000+ threat intelligence experts around the globe.
 |
To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy. |
Subscribe to RSSCompliance Reports
How To Boost Security Via FFIEC Compliance
With just a smartphone, users can conduct nearly all their banking business at any time of the day or night. However, all this flexibility and convenience opens up new avenues for fraud and cybercrime. Guidelines laid out by the FFIEC several years ago predate many of the capabilities-and vulnerabilities-that are in place today. In this report, we examine the latest guidelines and provide advice on how you can extend the work done to comply with FFIEC guidelines to strengthen your organization's overall security posture and keep customers and their data safe.
Keeping Compliance In Check
Configuration mistakes, access control gaffes, poor documentation--it doesn?t take much for a compliance audit to go all wrong. In this special retrospective of recent news coverage, Dark Reading takes a look at the costs, common missteps and best practices for compliance, as well as the day the Internet nearly went dark due to the threat of new regulations.
FISMA Lifts All Compliance Boats
FISMA may not be on your radar now, but it likely will be at some point. Geared specifically toward the federal government and its affiliate agencies and third parties, FISMA is a very specific set of requirements aimed at establishing and maintaining at least a baseline level of computer and network security. FISMA requires unique categorization and classification of information assets, not to mention a boatload of documentation to prove compliance. But once your organization achieves FISMA compliance, it will likely be compliant with just about every security mandate out there.
Other reports from the Compliance Tech Center:
Related Content
| Sponsored by: |  |
Log Management in 2012 and Beyond
2012 brings interesting changes to the log management world. Now, more than ever, it is critical to understand the impact to your log infrastructure and the solutions that will better prepare you to manage your security posture.
SANS Log Management Survey Report
Organizations are increasingly dependent on log management to support core business functions, including cost management, service level and line-of-business application monitoring, as well as traditional IT- and security-focused activities.
Cut the Time and Effort of Troubleshooting and Reporting
Organizations generate millions of logs a day and struggle with centralized collection, storage and analysis of those logs. ArcSight Logger is a universal log management solution that unifies searching, reporting, alerting and analysis across any type of IT data. It consolidates silos of logs into a single indexed repository for fast detection and mitigation of operational issues.
Get Turnkey and Automated PCI Compliance
PCI compliance monitoring is seamless with the self-contained ArcSight PCI Logger solution for log collection, storage and analysis. No database administration expertise is required and a web-based interface simplifies deployment and ongoing management.
Swiss Bank Meets Compliance Requirements and Protects Customer Data
Due to long-term data retention requirements, Swiss bank EFG needed a cost-effective way to collect, secure and store audit-quality log data in an easily accessible log repository. ArcSight Logger helps EFG meet key requirements of Switzerland?s banking laws fast and cost-effectively.
Compliance Newsfeed
- PCI Council Introduces New Certification & Training Program
- SureCloud Launches Unified Compliance Platform
- Visa Strategy Manager Boosts Issuer Fraud Detection
- LockPath Releases Version 2.3 Of Keylight Platform
- Information Security Forum Launches Threat Horizon 2014
- Uncertainty Brings Heightened Risk Awareness In New Era, Says PwC US
MORE NEWSFEED >>>
- The Dell Difference: Lessons from Dell’s Own IT Transformation
- The Business Case for Replacing Legacy Accounting Systems
- Techniques for Next-Gen Data Protection using Next-Gen Computing
- Enhance Business Performance with Process Oriented Data Stewardship
- Insurance Workforce Optimization: How To Work Smarter To Benefit Your Customers, Employees and the Bottom Line
