FFIEC News

Convergys to Help Assure PCI Compliance With Opsware and Solidcore

(Aug 28, 2007)-- Opsware, provider of data center automation software, and Solidcore Systems Inc., a leading provider of change control software, announced that Convergys Corporation has selected a combined Opsware and Solidcore solution to help address the Payment Card Industry Data Security Standard (PCI DSS). Convergys, a global leader in customer care, human resources, and billing services, will deploy the combined Opsware and Solidcore solution to detect and document file changes in real-time, and prevent unauthorized modification of critical system and content files across all production servers worldwide.

Convergys manages more than 1.7 million customer and employee contacts daily, more than 1.7 million bills daily, and more than 20 million employee interactions each year, including those for some of the world’s top financial organizations. The PCI Data Security Standard mandates that companies must ensure its critical transaction information, credit card data and customer information is safe from malicious system intrusions or changes. Following a thorough and comprehensive evaluation of PCI data security offerings, Convergys identified Opsware and Solidcore as a leader in the PCI data security marketplace capable of delivering a highly-scalable and reliable solution to help ensure continuous compliance with the PCI standard. Convergys will use Solidcore’s S3 Control software integrated with the Opsware System 6 data center automation suite to detect changes across servers and network devices in real-time. Using Solidcore’s change enforcement capability, the combined solution will also prevent unauthorized systems or personnel from changing critical system files or log data -- alerting administrators of attempted unauthorized changes. Only changes made authorized through the Opsware suite will be allowed, thereby ensuring that all changes are policy compliant.

Opsware and Solidcore provide a comprehensive control solution that greatly reduces the cost and effort required to verify and sustain PCI compliance. The combined Opsware and Solidcore solution captures critical change detail in real-time including “who” is making changes, “what” is actually being changed, “when” change is occurring, and “how” the change was made. This enables organizations to ensure deployed systems are always in a known and verified state. With Solidcore’s technology-based change policy enforcement, unauthorized changes can also be blocked to sustain compliance. All change events can be summarized in reports to demonstrate PCI compliance to auditors with minimal effort, thus reducing the cost of PCI compliance verification. Furthermore, Opsware System 6 is the only Data Center Automation suite that integrates change management, compliance, and process automation all in one, working across servers, networks and, later this year, storage.

“Managing and detecting file changes across an organization the size of Convergys can be a daunting and time-consuming task without the proper data center automation and file-detection solution,” said Sharmila Shahani, EVP of marketing at Opsware Inc. “The use of Opsware and Solidcore will provide Convergys with a centralized, real-time solution for quickly achieving compliance with the PCI DSS, and will help ensure only appropriate, approved changes are provisioned to the infrastructure.”

“Working with a global leader like Convergys further validates the effectiveness of the joint Solidcore and Opsware solution for verifying PCI DSS compliance,” said David Walker, senior vice president of worldwide operations for Solidcore. “Organizations that need to verify and sustain compliance with the PCI DSS in a cost-effective manner must use an automated control solution capable of tracking all file changes in real-time and preventing unauthorized file changes without manual intervention. Only the combined Solidcore and Opsware solution can provide this capability, documenting ‘who’ made a particular change and only allowing authorized changes to ever take place.”

Share or bookmarklet this web page at: