August 08, 2007 - 12:00
London, UK – Quipu Processing, a German company which partners banks and other services providers that are planning to build up a payment card business from scratch, has successfully implemented GFI EventsManager™ to address the requirements of the Payment Card Industry Data Security Standard (PCI DSS). GFI, an international developer of network security, content security and messaging software, has today issued a case study detailing this set-up.
As a company that works directly with companies handling, processing or storing cardholder data – to the tune of over 1 million transactions a month – Quipu required a solution to help them automate processes related to the logging of events and activity on their network as required by the PCI standard. These strict requirements ensure that companies’ systems are secure and that cardholder data that they (or their clients) may handle is well protected from hackers and other identity thieves.
With credit card fraud on the rise, professional companies like Quipu Processing cannot afford to let their guard down and risk data disclosure to third parties. Conscious of the risks and aware of the consequences, Mark-Oliver Horst, chief technical officer at Quipu Gmbh said: “As a card-processing company we have been fully aware of the PCI DSS requirements and the need to maintain compliancy with these standards. And this is something that we have been working very hard on for many months. “We had two main technology compliance issues facing our company, data encryption and key management on one hand, and event monitoring, filtering and notification on the other,” Mr. Horst added.
The collection and analysis of event logs network-wide can be a major headache for administrators and it is physically impossible to monitor each server individually and sift through thousands of events every day. Thus, Quipu needed a solution that not only fulfilled part of the requirements for PCI compliance but one that was easy to install and that provided administrators with the ability to access, analyze and archive from a single console the thousands of events that occurred on the network every day and that categorized events by severity and alerted administrators on critical events.
After examining what solutions were available on the market, Quipu chose GFI EventsManager, an event log management solution.
“We found GFI EventsManager to have a good price performance ratio and one that met our event log management needs… I would say the greatest benefit we’ve had using GFI EventsManager is that it has helped Quipu to solve PCI DSS compliance issues.”
The full case study may be viewed at http://www.gfi.com/documents/cs/quipu.htm.
About GFI EventsManager
GFI EventsManager allows you to monitor network security and performance through event log management. Data is collected from all devices that use Windows event logs, W3C or Syslog and key data and critical issues can be identified thanks to in-built and custom rules and filtering. GFI EventsManager provides real-time alerting when critical system and security events arise thereby helping administrators to easily identify areas which require immediate attention. Event log management is also an important tool for organizations that are seeking compliance with various industry directives, including SOX, ISO 17799/27000 and PCI DSS. For more information on GFI EventsManager visit http://www.gfi.com/eventsmanager/.
GFI is a leading software developer that provides a single source for network administrators to address their network security, content security and messaging needs. With award-winning technology, an aggressive pricing strategy and a strong focus on small-to-medium-sized businesses, GFI is able to satisfy the need for business continuity and productivity encountered by organizations on a global scale. GFI has offices in the US, Malta, UK, Hong Kong and Australia which support more than 200,000 installations worldwide. GFI is a channel-focused company with over 10,000 partners worldwide. GFI is a Microsoft Gold Certified Partner. More information about GFI can be found at http://www.gfi.com.