PCI Compliance
- From: "Josh Haft" <pacmansyu@xxxxxxxxx>
- Date: Wed, 9 Jan 2008 17:35:31 -0600
Hello all, need some opinions on PCI compliance.
The company I work for is trying to become PCI compliant by June 30...
we have a long way to go.
According to requirement 8.3 of the PCI DSS, two-factor authentication
is required for remote access.
I've been evaluating Aladdin's eToken product and have been impressed,
especially considering the cost.
My question is whether anyone has had experience with this product in
general or as it relates to PCI compliance.
The execs are concerned because they seem to be a smaller company
(perhaps not as reputable), but mostly because RSA is the only
two-factor auth solution they've heard of, so are hesitant to adopt an
alternative solution.
Thoughts, comments or concerns on this approach to complying with that
section of the PCI DSS would be appreciated.
Josh
- Follow-Ups:
- Re: PCI Compliance
- From: Kartik
- RE: PCI Compliance
- From: JD Brown
- Re: PCI Compliance
- From: Nick Owen
- Re: PCI Compliance
- Prev by Date: RE: Email security - gateway
- Next by Date: RE: firewall and pack shape for 10G
- Previous by thread: Re: Secure Internet Browsing
- Next by thread: Re: PCI Compliance
- Index(es):