Summary
Most web sites, software and operational procedures are hacker friendly and repairing them will take years. Plan B, is to attempt to stop theft by using Data Loss Prevention and Encryption tools.
Unfortunately, some IT departments are rejecting these tools as too demanding.
Analysis
Michael Cherry, an online-security consultant, says companies can encrypt credit card data at cash registers, which PCI doesn't require, at minimal cost. "You can be worry free for less than $100 per cash register," says Mr. Cherry.
Data loss prevention includes both network and end point (PC) detection. Encryption offerings can support credit cards, data base and email. Many firms have offerings in this emerging market including: Palisade Systems, Code Green Networks, Safend, GTB Technologies, CA inc. DLP, Identity Finder, Websense Data Endpoint, Trend Micro LeakProof, Indorse, Proofpoint, Vericept, Workshare, Symantec Vontu, EMC RSA, Voltage, Verdasys, McAfee, inc. DLP, Magtek MagneSafe, PGP, Fidelis Security and VeriFone Holdings VeriShield Protect
Copyright January 2010, Michael Cherry Cherry Biometrics Inc., all rights reserved


