The Payment Card Industry Data Security Standard (PCI DSS) was developed by the major credit card companies as a guideline to help organizations that process card payments prevent credit card fraud, hacking and other information security threats.  Any company handling card payments must be PCI DSS compliant or risk fines and losing the ability to accept credit card payments. 

The Data Security Standard consists of 12 broad requirements that retailers, data processors, on-line merchants, and related third-parties (e.g. hosting providers) must implement to protect sensitive cardholder data.  These requirements are grouped into 6 control objectives, which cover the design, building, management, and ongoing monitoring, of security policies, networks and systems.

Exaprotect helps organizations achieve these objectives.

LogManager and EventManager simplify the complexities of collecting, analyzing, monitoring, and reporting on security events from multiple sources.   Both include specific custom reporting that allow you to directly map your organizations’ progress toward achieving or maintaining PCI DSS compliance.

LogManager is a highly scalable and easy to use appliance that monitors and stores the massive amounts of log data generated by large enterprise-class infrastructures and required by PCI DSS to be available for audits and forensic evidence.

EventManager is a full-featured Security Information and Event Management (SIEM) platform that correlates security events and information across applications, servers and security systems.  Security policy deviations are instantly identified, allowing security monitoring teams to react to security threats, and risk control teams to report on PCI security policy adherence. Powerful event classification and archiving features further create a continuous, auditable link between source events and PCI control requirements.

ChangeManager simplifies the complexities of designing, deploying, and documenting security policies across single-and multi-vendor networks.  This one-of-a-kind management platform spans firewalls, routers, switches, VPNs, and other related network security infrastructure devices, allowing network security teams to plan and implement key PCI requirements accurately and efficiently.