« Hello Ruby Tuesday |
Main
| The Log Data Warehouse »
"We're In a Security Arms Race, "according eBay CEO Meg Whitman, who made this
comment at the Visa Security Summit last week.
While Nordstrom executives called for more guidance from card companies on how to rank data risks to help categorize high- and low-priority issues and Visa USA President and CEO John Philip Coghlan talked about the impact of retailers storing prohibited data, eBay's Whitman offered some proactive steps towards a solutions for protecting customer data.
EBay, she says, includes a digital signature on every email it sends so that customers can identify legitimate company e-mails in the hopes that ISP's will only route emails that contain this signature. EBay-owned PayPal has a
security key that creates a random code to authenticate each transaction.
Whitman also expressed a bit of dissatisfaction with the way banks and card companies have handled compliance issues in the past, noting that bank card networks receive information about fraudulent transactions long before (sometimes days or weeks) merchants find out. Not ok, according to EBay, which wants to know about fraudulent payment accounts before its users ship that autographed Yankee baseball to the bad guys.
Ebay is saying what we are hearing here at LogLogic from many of our customers who are feeling the pressure to comply with the
PCI data security standard and need a complete approach that carefully tracks, manages, and reports on log data.
Ignoring PCI is
risky for your business.
Technorati : Compliance, Log Management, PCI
Posted March 15, 2007 in | Permalink
TrackBack URL for this entry:
http://www.loglogic.com/mt/mt-tb.cgi/161