Security Standards White Papers
Guide to PCI Compliance for Web Applications: Updated for Version 1.2 of the Payment Card Industry Data Security Standard
Overview On the surface, the Payment Card Industry (PCI) Data Security Standard (DSS) reads as a series of do this, don't do that" absolutes. Vet, in three areas, the standard gives organizations some flexibility in their options. The most critical of these choices lies in Requirement 8.6. This section states that all web applications must be protected by an application-layer firewall (also known as a web application firewall) or undergo a code review by an organization that specializes in application security. With all the noise in the market, how does one decide which solution is right for organization? This white paper will help one make that decision.
| Publisher | Breach Security | File Format | |
|---|---|---|---|
| Date Published | October 2008 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSSAchieving compliance with GSi Code Of Connection (CoCo)
DownloadIn November 2005, The Government published 'Transformational Government - Enabled by Technology' which documents the steps necessary to achieve effective delivery of technology for Government. To develop the necessary trust...
MessageLabs - The Dark Art of Spam
Quite simply, MessageLabs anti-spam solution provides businesses with the quality of protection they urgently need if they are to stay a step ahead of the spammers - and the increasingly...
Maximising site vistors trust using extended validation SSL
Web business faces a crisis in confidence. Trust in site security is decling, resulting in consumers scaling back on web transactions or just opting out altogether. This white paper address...
Compliance with Data Handling Procedures in UK Government
The UK Data Handling Procedures in Government Report set out clear and mandatory procedures to be followed by all government employees that have access to and responsibility for citizen data....
"We Have Met the Enemy, and He is Us."
Organisations are being force towards indentity- based acess lifecycle management tools in order to support IT agility & flexability, safeley empowering staff and rapid evolution of data cetres and core...
