Protecting stored voice and screen recordings of cardholder data is one of the toughest compliance challenges call centers face under the Payment Card Industry Data Security Standard (PCI DSS). Meeting this requirement involves a particularly challenging type of data encryption, and in the past often necessitated several solutions from many different vendors. Deploying multi-vendor point solutions is expensive, causes interoperability problems, and is difficult to manage.
"SafeNet and TantaComm's single data encryption solution reduces the cost and complexity of PCI compliance and ensures that stored cardholder information from call centers is secured," said Derek Tumulak, vice president, product management, SafeNet. "From the database to file servers and endpoint devices, at no point in time does data exist in a non-encrypted state with our combined technologies."
As voice data is recorded, TantaComm's Dartserver software generates a key which is sent to SafeNet DataSecure for encryption. The encrypted key is then returned to the Dartserver and stored in the media file along with the encrypted media. When the data is played back, the authorized user retrieves the encrypted file from a central media storage using the playback application which decrypts the media on the fly.
"It's a highly secure solution, but what's equally impressive about it is its cost efficiency and ease of deployment," said Ginney McAdams, Vice President, Business Development at TantaComm. "It can be implemented in a call center already using TantaComm's Auditor recording solution which eliminates the need to replace the base hardware. In addition, multiple recording servers can be attached to a single SafeNet DataSecure appliance which allows up to 11,000 keys to be encrypted simultaneously, enabling a true enterprise solution."
SafeNet's DataSecure is part of SafeNet's comprehensive Enterprise Data Protection (EDP) solution. With SafeNet, merchants, banks, payment processors, and other companies subject to PCI DSS compliance can protect sensitive cardholder data at rest, in use, and in transit to meet the most challenging PCI security requirements. SafeNet solutions for PCI compliance are the most complete, extensible, and easy to manage. This not only reduces costs, but also extends value by addressing data security requirements beyond PCI compliance to other requirements across the organization.
SafeNet EDP is the only solution that secures data across the connected enterprise, from core to edge, with protection of data at rest, data in transit, and data in use. Unlike disparate, multi-vendor point solutions that can create limited "islands" of security, SafeNet EDP provides an integrated security platform with centralized policy management and reporting for seamless, cost-efficient management of encrypted data across databases, applications, networks, and endpoint devices.
TantaComm will discuss "Securing Call Center Recordings" at SafeNet's booth (2325) at RSA Conference 2009 on Tuesday, April 21 at 11:30 a.m., and again on Wednesday, April 22 at 1:30 p.m.
About SafeNet and Aladdin Knowledge Systems
In 2007, SafeNet was acquired by Vector Capital, a $2 billion private equity firm specializing in the technology sector. Vector Capital acquired Aladdin in March of 2009, and placed it under common management with SafeNet. Together, these global leading companies are the third largest information security company in the world, which brings to market integrated solutions required to solve customers' increasing security challenges. SafeNet's encryption technology solutions protect communications, intellectual property and digital identities for enterprises and government organizations. Aladdin's software protection, licensing and authentication solutions protect companies' information, assets and employees from piracy and fraud. Together, SafeNet and Aladdin have a combined history of more than 50 years of security expertise in more than 100 countries around the globe. Aladdin is expected to be fully integrated into SafeNet in the future. For more information, visit www.safenet-inc.com or www.aladdin.com.
About TantaComm, LLC
Since 1994, TantaComm has been engineering advanced technical solutions for contact center management that provide a rapid return on investment with product life cycles that remain productive long after other systems are discarded. TantaComm specializes in innovative and high performance recording solutions for Quality Assurance, Call Verification, and Regulatory Compliance for contact centers serving numerous markets, including Fortune 100 financial institutions and contracted contact centers entrusted to serve on behalf of the world's leading companies.
For more information, visit www.tantacomm.com