Re: PCI and banks that use Akamai

["Daniel, Jack" <jdaniel () CONCORDANT COM>]

That's interesting!  Well I'm sure it's a service the bank has to pay extra money for and I'm sure most smaller banks 
wouldn't realize that.

So point in case I guess it would be another step - verify the bank uses Akamai's PCI service

-----Original Message-----
From: Jeffrey Schiller [mailto:jis () MIT EDU] 
Sent: Monday, June 14, 2010 2:48 PM
To: The EDUCAUSE Security Constituent Group Listserv
Cc: Daniel, Jack
Subject: Re: [SECURITY] PCI and banks that use Akamai

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/14/2010 02:22 PM, Daniel, Jack wrote:
> I believe it would be only for static content however if a bank were
> using Akamai for transaction exchange they do offer a PCI compliant
> service:
> http://www.akamai.com/html/about/press/releases/2007/press_103007.html

This has to be something very different from their normal content
distribution network. For example we have a pile of Akamai servers
located in one of our data centers that is not PCI compliant (from a
physical security standpoint). So in theory there is no way for these
servers to be PCI compliant. So hopefully they have nothing to do with
Akamai's PCI compliant payment platform.

                       -Jeff

- --
========================================================================
Jeffrey I. Schiller
MIT Network Manager/Security Architect
PCI Compliance Officer
Information Services and Technology
Massachusetts Institute of Technology
77 Massachusetts Avenue  Room W92-190
Cambridge, MA 02139-4307
617.253.0161 - Voice
jis () mit edu
http://jis.qyv.name
========================================================================

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFMFnlL8CBzV/QUlSsRApObAKCNnpk8Ef0t1aU4g5uRMIAmZxn5DwCfVcpZ
rViSMHKNEa/0iPofd9Xby24=
=685f
-----END PGP SIGNATURE-----