The Difference Between Being Secure And Being Compliant
Download as PPTX, PDF1 like384 views
The document discusses the difference between security and compliance. It begins with an overview of AccuCode, a company that provides security and compliance services. It then discusses how security is about protecting assets from threats like malware, hackers, and social engineering. Compliance, on the other hand, focuses on following standards and regulations. The document stresses that security is an ongoing process of analyzing risks and implementing appropriate protection measures. While compliance is important, true security requires layers of people, processes and technologies working together. Outsourcing to experts can help organizations achieve both security and compliance.
The Difference Between Being Secure And Being Compliant
- 1. The Difference Between Being Secure And Being CompliantJohn Bedrick - AccuCode
- 2. AgendaAbout AccuCodeWhich is Worse?Unlocking the Security TaxonomySecurity versus ComplianceHow much security is enough? What happens if ……. ?Closing ThoughtsAO:ComplianceNext StepsQuestions and Answers
- 3. AccuCode the CompanyFounded 1995
- 4. VAR, Professional & Managed Services, Commercial Software Products
- 5. National leader in: retail systems,security & compliance, wireless networking, mobile computing, bar code & RFID technologies
- 6. Fastest Growing Privately Held Company in the U.S.
- 7. Trusted Advisor Delivering Guaranteed Outcomes AccuCode Customers & PartnersPartnersManufacturingRetailTransportationAccuCode has hundreds of customers & thousands of end-users!
- 8. Which is Worse?Illusion versus Reality
- 9. Unlocking the Security TaxonomyPEOPLE
- 10. Security Versus Compliance (NOT a complete list)
- 11. How Much Security Is Enough?Step 1 – Determine the Assets you need to protect.Step 2 – Determine how much those Assets are worth (to you and someone else)Step 3 – Determine the level of Risk you are willing to live with.Step 4 – Decide how much you are willing to spend to protect those Assets, based on the level of Risk you have determined to accept.Step 5 – Implement Security measures based on above. (Answer: It’s never enough!)Step 6 – Repeat as often as needed or whenever things change.MalwareRootkitsHackersTrojansPhishingVirusesSpywareBot NetsAdwareWormsSocial EngineeringSpam
- 12. What Happens If…..?you have a breach and you were compliant; but, not “secure”?Determined on a case-by-case basis and also State-specific privacy laws.someone breaks into your business and steals your servers and/or back-up systems (drives, tapes, paper records, etc…)?Were appropriate protection measures being used at the time? Disaster recovery?your phone or mobile device (e.g., tablet) is lost or stolen?Is there sensitive data stored on the phone/device? Can you remote “wipe” it?a “vendor” is at fault?Did you “check out” the vendor and double-check their work?an employee is “duped” (social engineering) or assists a criminal?Was the employee trained in the proper policies and procedures?Did you “hire right” and the employee “checked out” prior to hiring?there was nothing more that could’ve been done – it just happened?There’s always more that could be done.Did you determine the appropriate level of risk and secure appropriately?
- 13. Closing ThoughtsSecurity is a journey; not, a destination. But it’s also a race.Implementing proper levels of security require careful analysis of risk versus implementation.Well thought out security requires layers of protection all working together.There are NO guarantees for being 100% secure.Being PCI compliant is far better then not being compliantit’s a step in the right direction for becoming more secure.Hire reputable security/compliance experts to help you.Don’t get into a position of the “blind leading the blind”.
- 14. ANDNext Steps
- 15. AO:Compliance Makes PCI Compliance as Easy as:
- 16. Next Steps, If You Need HelpAccuCode and our partners are ready to assist you with getting and staying PCI Compliant
- 17. Go to the AO:Compliance website to find out more information about our compliance and security offerings www.aocompliance.com
- 19. If you need help with other technology issues, AccuCode can also assist you with that as well
- 20. Visit the AccuCode website for more information about our other products and services www.accucode.com
Editor's Notes
- #13: Assess and Analyze (This critical step will help you understand how much becoming PCI compliant will cost you!)Assess the current environmentAnalyze any gaps that may existClose the GapsRemediate gaps & problem areasGet the environment compliantStay CompliantPerform regular testing & scanningRemediate to stay compliant