Presented at Security Professionals Conference, PCI DSS

The Data Center Within a Data Center: Building a Secure Environment for Compliance

Added by the EDUCAUSE Librarian
Title:The Data Center Within a Data Center: Building a Secure Environment for Compliance (ID: SEC08074)
Author(s):David Seidl (University of Notre Dame)
Origin:Presented at Security Professionals Conference (05/04/2008)
Type:Presentations/Speeches
Abstract:

PCI compliance can be daunting, particularly in a university network environment. Notre Dame chose a data center within a data center approach to simplify compliance and minimize integration issues. This project includes implementing the data center, a virtual network to support point-of-sale devices, and related operational procedures.

View this resource:

PCI DSS Lessons Learned

Added by the EDUCAUSE Librarian
Title:PCI DSS Lessons Learned (ID: SEC08064)
Author(s):Jennifer A. Stewart (The Pennsylvania State University) and Michael Leach (The Pennsylvania State University)
Origin:Presented at Security Professionals Conference (05/04/2008)
Type:Presentations/Speeches
Abstract:

Penn State University formed the Information Privacy and Security (IPAS) Project to tackle PCI DSS compliance obligations and other security concerns related to the protection of personally identifiable information. This presentation will cover the PCI DSS challenges IPAS faced when working with 23 campus locations and 52 merchant segments.

View this resource:

Roundup of Legal Developments in Cybersecurity and Privacy Law

Added by the EDUCAUSE Librarian
Title:Roundup of Legal Developments in Cybersecurity and Privacy Law (ID: SEC07074)
Author(s):M. Peter Adler (Adler InfoSec & Privacy Group LLC)
Origin:Presented at Security Professionals Conference (04/11/2007)
Type:Presentations/Speeches
Abstract:This session will cover state and federal legal and regulatory developments in information security and privacy, including the notice of security breach laws and actions by the Federal Trade Commission, as well as litigation and other actions under PCIDSS, HIPAA, SOX, and state law.
View this resource:

Two Approaches to PCI DSS Compliance

Added by the EDUCAUSE Librarian
Title:Two Approaches to PCI DSS Compliance (ID: SPC0674)
Author(s):Michael Chapple (University of Notre Dame) and Jane Drews (The University of Iowa)
Origin:Presented at Security Professionals Conference (04/11/2006)
Type:Presentations/Speeches
Abstract:The Payment Card Industry Data Security Standard (PCI DSS) poses a unique challenge to institutions of higher education, which often host many diverse credit/debit card merchants on our campuses. Learn about merchant levels and the 12 security requirements, as well as two different approaches to compliance: the design and implementation of a central framework to bring your institution into PCI DSS compliance, and a risk-assessment and remediation process to assist distributed merchants with individual PCI DSS compliance efforts.
View this resource: