Re: PCI DSS compliance software

["Penn, Blake C" <blake.penn () SECURITY GATECH EDU>]

As a former QSA, I would recommend just about any commercial GRC tool over a vendor-specific tool.  The purpose of the 
latter is to be “sticky,” to make the cost of moving away from the tool prohibitively high.

FWIW, we are planning to implement ServiceNow GRC to handle PCI DSS and all other compliance mandates.

Regards,

Blake Penn
Information Security Policy and Compliance Manager
Cyber Security
Georgia Institute of Technology
(404) 385-5480

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of David D 
Grisham
Sent: Friday, February 23, 2018 11:45
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] PCI DSS compliance software

CoalFire. Cheers.-grish

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Chris 
Grooby
Sent: Friday, February 23, 2018 5:27 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] PCI DSS compliance software

Trustwave

On Feb 19, 2018 4:10 PM, "Kevin Shalla" <kshalla () uchicago edu<mailto:kshalla () uchicago edu>> wrote:
Does anyone have suggestions on software designed to track PCI DSS compliance?


Kevin Shalla
Manager of Technology
Campus and Student Life
University of Chicago