Educause Security Discussion mailing list archives

Re: Vendors for PCI Compliance Scanning


From: Peter Sylvester <Peter.Sylvester () MAIL CUNY EDU>
Date: Wed, 28 May 2008 15:02:29 -0400

I agree with Roger.

Peter Sylvester
Information Security Policy & Compliance
The City University of New York
Office - (212) 541-0961
Mobile - (917) 331-9930
peter.sylvester () mail cuny edu
http://security.cuny.edu



Roger Safian <r-safian () NORTHWESTERN EDU>
Sent by: The EDUCAUSE Security Constituent Group Listserv
<SECURITY () LISTSERV EDUCAUSE EDU>
05/28/2008 02:57 PM
Please respond to
The EDUCAUSE Security Constituent Group Listserv
<SECURITY () LISTSERV EDUCAUSE EDU>


To
SECURITY () LISTSERV EDUCAUSE EDU
cc

Subject
Re: [SECURITY] Vendors for PCI Compliance Scanning






Is this an appropriate use of this list?  Personally I don't mind
vendor participation, as long as said participation isn't just
a transparent ploy to drum up business.  This seems to be a most
egregious violation.  Am I the only one who feels that way?

At 01:35 PM 5/28/2008, Brett Bartow put fingers to keyboard and wrote:
Chuck,

We have a very strong solution for automating compliance. Seven out of
the top ten retailers use Tripwire. Please see the following link and
give me a call if you would like to discuss further.

http://www.tripwire.com/solutions/regulations/pci.cfm

Thanks,

Brett Bartow  Account Manager - Education/Nonprofit

Direct:  503.276.7651
Fax:     425.963.4652

TRIPWIRE | The Leader in Configuration Audit & Control
Check out the latest Tripwire news!


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Chuck McCants
Sent: Wednesday, May 28, 2008 10:58 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Vendors for PCI Compliance Scanning

Hello,
A question came up in a meeting this morning, that leads me to ask -
"What company are you using to do your PCI compliance scanning?"

All responses and opinions of your experiences would be helpful (good or
bad).


--

Chuck McCants
Lead Security Specialist
C&IT Security and Access Mgmt
Wayne State University
313.577.3455

--
Roger A. Safian
r-safian () northwestern edu (email) public key available on many key
servers.
(847) 491-4058   (voice)
(847) 467-6500   (Fax) "You're never too old to have a great childhood!"

Current thread: