RSA, The Security Division of EMC, has published the RSA PCI Solution Guide, a QSA-reviewed guide that is designed to provide formal guidance for enterprises deploying virtual infrastructure in Payment Card Industry (PCI)-regulated data centers. The RSA PCI Solution Guide is an addendum to the VMware Solution Guide for the Payment Card Industry. The RSA PCI Solution Guide augments the native security offerings in the VMware vCloud® Suite to cover additional control areas required for PCI compliance, helping to enable retailers to accelerate and simplify the transition of mission critical operations to virtualized data centers.
“Customers are eager to virtualize even their most sensitive systems, including PCI payment processing, and by integrating with RSA’s core set of security management and compliance tools customers can supplement our native security offerings to accelerate deployments and reduce the complexity of meeting audit requirements,” said Parag Patel, vice president, Global Strategic Alliances of VMware. “VMware and RSA are committed to helping regulated organizations move along in their journey to the cloud by providing in-depth and validated guidance to the compliance community and customers who are subject to PCI compliance.”
“RSA has a comprehensive security management and compliance suite, including RSA Archer, RSA Data Loss Prevention, RSA enVision and RSA NetWitness technology, which can all be leveraged to help better protect credit card data in virtual environments and address PCI compliance requirements,” said Carol Clark, RSA Senior Director of Security Management and Compliance product marketing. “RSA is an integral part of VMware’s security and compliance strategy that helps enables customers to migrate to virtual and private cloud environments securely.”
The RSA Archer eGRC platform is engineered to provide a GRC framework that is part of the reference guide to PCI compliance, enabling RSA to address the PCI controls that need to be monitored and reported on in a VMware environment. The integration between RSA Archer eGRC and VMware vCenter™ Operations™ demonstrates the capability of end-to-end visibility, automated compliance and effective remediation.