netHSMPCI Audit
PCI requires strong audit capabilities as part of data security
In response to consumer concern about credit card security, the major card associations in the Payment Card Industry (PCI) have created guidelines for the transmission, storage and processing of cardholder data. A number of critical recommendations cover issues related to the encryption of data and the ability to audit user access. PCI audit capabilities are critical for complying with industry and government regulations such as Sarbanes-Oxley. nCipher's enterprise key management system addresses the need for PCI audit requirements.
nCipher key management software enhances PCI audit functionality
nCipher keyAuthority, an enterprise key management system, offers PCI audit functionality. This robust solution not only provides for centralized management of the generation, distribution, storage, and retrieval of the cryptographic keys needed to encrypt and decrypt data, but also creates audit records for all changes on system data. A central Management Console with an integrated hardware security module helps to enforce strong authentication within the system, and each change to a data object is traceable to a specific set of credentials, enabling a strong PCI audit. A central management server helps maintain the integrity of audit records, security policies and other data objects through hardware-protected cryptographic mechanisms. keyAuthority also helps reduce the cost of securing and managing keys by automating many tasks, and improves security and regulatory compliance across the organization by enforcing security policies consistently.
Beyond the PCI audit: additional security solutions from nCipher
In addition to solutions for the PCI data security standards, nCipher offers a variety of other solutions for the security-conscious organization. nCipher provides a line of hardware security modules that offer advanced cryptographic security. netHSM is a cryptographic resource that can be shared between multiple servers, offering a cost-effective option for key protection. nShield is a tamper-resistant dedicated hardware security module that provides enhanced key security. nCipher also offers a payShield Option designed specifically for the stringent security needs of the payments industry. This device can be seamlessly integrated with the most common 3-D secure authentication platforms and can be enhanced to deliver broader security solutions. Additional nCipher hardware includes innovative and cost-effective solutions for SSL acceleration, document signing and time stamping.
nCipher also offers timestamp technology, an SSL solution for SSL TLS acceleration, and PKI software, including solutions used for the Microsoft PKI deployment.
Learn more about PCI audit tools from nCipher
Irish Department of Defense
