In September 2006, the Payment Card Industry (PCI) Security Standards Council released the PCI Data Security Standard (DSS) v1.1. This regulation required member financial institutions to be responsible for their own compliance, as well as ensuring the compliance of their merchants and service providers for all payment channels, including in-store, mail/telephone order, and e-commerce.

Many requirements in the PCI DSS focus on the ability to monitor and report on changes made across the IT environment.

Configuration Audit and Control Solutions from Tripwire help validate these PCI requirements by:

• Confirming access to computing resources and cardholder data is limited to the proper individuals
• Validating that patches are deployed properly
• Alerting you to unauthorized changes to firewall rules
• Ensuring wireless network security policies are not circumvented
• Detecting new, modified, or deleted user IDs
• Maintaining file integrity across the entire enterprise