Resources for Federal Financial Institutions Examination Council (FFIEC)

How to Make Guests Feel at Home (and Still Comply with PCI and Sarbanes Oxley Too)

www2.csoonline.com

When Mark Burnette came to Gaylord Entertainment Company in 2005, the hospitality and entertainment chain was well into its first year of Sarbanes-Oxley compliance. Burnette was brought into a newly created role, the executive director of IT operations and security, to help build a mature information-security function that would help the company comply with PCI and SOX regulations.

Since then Burnette has used his skills as a former IT auditor to get the compliance program into shape at this $900 million company, which owns the Grand Ole Opry and several large convention sites. CSOonline.com recently caught up with him to learn more about the challenges of compliance at a mid-sized business, how to build support for a security program, and what to do about the risk of guests who want to “explore” private areas of a hotel, like the accounting office.

View the Resource

Share or bookmarklet this web page at: