Re: CampusGuard for PCI DSS assistance

["Marley, Tim" <tim.marley () OU EDU>]

Sam,

This isn't a direct answer to your question.  Sorry, no experience with Campusguard.  If you are interested in looking 
at healthy alternatives, I would recommend a call to Coalfire before you decide.  If nothing else, for the sake of 
comparison.  I can give Coalfire a healthy recommendation based upon what they've done to assist in our own compliance 
efforts.

http://www.coalfiresystems.com/

-Tim

Timothy J. Marley 
CPA * CISSP * CITP * CISM * CISA * GSNA * CPISM/A * CIPP
Senior IT Compliance Auditor 
University of Oklahoma 
Information Technology, Security Team 
office 405.325.5418

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Sam 
Hooker
Sent: Thursday, June 10, 2010 3:01 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] CampusGuard for PCI DSS assistance


Hi folks,

We're currently in the throes of a campus-wide PCI DSS project. In seeking a QSA to validate the tech portions of our 
remediation plan, we came across CampusGuard[1]. CampusGuard seems a good fit, and we've received a few references who 
spoke positively of them. I'm wondering if there are more folks out there with first-hand CampusGuard experience, 
positive or otherwise.

I'm not looking to solicit trash-talk, nor anecdotes; nor do I think that the references we contacted failed to give us 
the whole story. But if you've engaged CampusGuard's services and care to share your opinion in a way that might help 
another potential client, please let me know.

Feel free to contact me off-list, if you feel that's most appropriate.
Thanks for your time.


Cheers,

-sth

[1]http://www.campusguard.com

--
Sam Hooker | samuel.hooker () uvm edu
Systems Architecture and Administration
Enterprise Technology Services
The University of Vermont