FFIEC News

Skybox Security Joins PCI Security Standards Council as Newest Participating Organization

(Dec 11, 2008)-- Skybox Security has announced that it has joined the PCI Security Standards Council as a new participating organization. As a Participating Organization, Skybox Security will work with the Council to evolve the PCI Data Security Standard (DSS) and other payment card data protection standards. Skybox is the first and only network compliance and assurance vendor to support the PCI DSS V1.2 standard released in October. Through its participation, Skybox aims to the advance the automation of assessments and compliance processes for network-related PCI requirements - some of the most difficult for enterprises to enforce due to high complexity and labor costs.

The PCI DSS, endorsed by American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa Inc., requires merchants and service providers that store, process or transmit customer payment card data to adhere to information security controls and processes that ensure data integrity. More information on the council and the standard can be found at www.pcisecuritystandards.org.

As a Participating Organization, Skybox Security will now have access to the latest payment card security standards from the Council, be able to provide feedback on the standards and become part of a growing community that now includes nearly 500 organizations. In an era of increasingly sophisticated attacks on systems, adhering to the PCI DSS represents an entity’s best protection against data criminals. By joining as a Participating Organization, Skybox is adding its voice to the process.

“The PCI Security Standards Council is committed to helping everyone involved in the payment chain protect consumer payment data,” said Bob Russo, General Manager of the PCI Security Standards Council. “With the latest version of the PCI DSS standard released in October, we strived to clarify and ease implementation. By participating in the standards setting process, Skybox Security demonstrates they share this same end goal and as an active participant will bring further insights into automating the implementation of PCI requirements in a dynamic network environment.”

Automated Risk and Compliance Management (ARCM) has emerged to help organizations move away from reactive security information and compliance management programs to a more proactive, measurable, and predictable best practice. Gidi Cohen, CEO, Skybox Security, says organizations can save significant time and money through an efficient audit and compliance assessment process. “A good percentage of our customers are required to comply with the PCI DSS standard and as a result need to better understand how their network is designed, built, and operated. Skybox will contribute to the evolution of the PCI DSS standard by sharing our visibility into customer challenges and how they are turning to ARCM solutions everyday to solve complex operational challenges without adding another layer of security,” Cohen adds.

Share or bookmarklet this web page at: