Dr. Anton Chuvakin is using Brazen Careerist to share ideas. Join now to become a member and start networking with Dr. Anton Chuvakin and other professionals just like you. Learn more.
Dr. Anton Chuvakin
>breaks usefulness
Well, I've seen cases where is a little creative thinking allows them to skip PAN storage and still preserve business usefullness.
In some cases, this is clearly impossible; but maybe they can outsource to somebody who can protect the data better..
Ray Pompon
PCI mandated encryption is a fare - other than laptop encryption, how many people under PCI actually implement crypto for their applications that process PANs (ccard #s). Most of what I see are "compensation controls" because crypto is too expensive to do. What's you're take?
Dr. Anton Chuvakin:
Yup, my point exactly: tokenization or simply not touching the data by using other technologies works wonders to PCI scope, cost, etc. 129 weeks ago
Ray Pompon: But what about those who cannot tokenize or remove the PANs from their applications because it breaks the business usefulness of the system? I've ...MoreBut what about those who cannot tokenize or remove the PANs from their applications because it breaks the business usefulness of the system? I've seen quite a few cases of large corps where it wasn't cost effective to alter the data in any way within the legacy app. 129 weeks ago