ISR News: Heartland Breach Updates
Excerpts From 2008Breach.com
For the past year, Robert O. Carr, Heartland’s chairman and chief executive officer, has been advocating for payments industry adoption of this technology — which will protect data at rest as well as data in motion — as an improvement for payment transaction security.
Carr stated, “PCI is a good and effective standard, but the bad guys have become more sophisticated to the point where encryption of data in motion appears to be one of the next required steps. There is no single silver bullet that will secure payment systems, and constant vigilance and monitoring of the infrastructure will always be required. Nevertheless, I believe the development and deployment of end-to-end encryption will provide us the ability to implement increasing levels of security protection as they become needed.
“Heartland has been working on the development of end-to-end encryption, but in light of our recent data breach and the impact cyber fraud has had on the public and processors nationwide, we are ramping up our efforts,” Carr continued. “To do this, we are forming a dedicated internal department and have named Steven M. Elefant, a well-known expert in point-of-sale payments, executive director.”
Filed under: Breach, Class Action Lawsuit, D&O Liability, Financial, ISR News, Insider Threat, PCI, Sarbanes-Oxley, Uncategorized, hackers, identity-theft, privacy
Comments
One Comment on ISR News: Heartland Breach Updates
-
Kevin M Nixon on
Sun, 1st Feb 2009 1:05 pm
For all financial executives dealing with the risks of data a rest or “on the fly” I suggest going to the ISO site and downloading “Banking and related financial services — Triple DEA — Modes of operation — Implementation guidelines”
The ABA and ANSI X9 participation is also critical for the security staff of any large financial organization. ISO 19038 was specifically written to deploy an end-to-end solution.
Making sound risk and security decisions can not be performed by development staffs that are isolated from reality.
The ISO Implementation guide is written to allow for business processes to continue while maintaining extremely strong data transfer. Commitment to participation should be first and foremost!
http://www.iso.org/iso/iso_catalogue/catalogue_tc/catalogue_detail.htm?csnumber=33733
Kevin Nixon
Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!
