Set of audited reference architectures to help retailers worldwide meet broad compliance challenges while bolstering security efforts

New York, NY — RSA, The Security Division of EMC (NYSE: EMC), today announced the interoperability of five RSA® PCI Solutions in the Cisco Payment Card Industry (PCI) reference architectures. The Cisco PCI Solution for Retail Validated Network Designs help retailers of all sizes effectively address the data security requirements mandated by the PCI Data Security Standard (PCI DSS).

The Cisco Validated Network Designs, which have been validated by external PCI Qualified Security Auditor (QSA) Verizon Business, offer a set of cost-effective, audited solutions that help customers meet many of the most challenging PCI DSS requirements, including authentication, encryption and compliance reporting. RSA is leveraging the Cisco PCI Validated Network Designs to help enable retailers to easily integrate new or existing technology solutions into their in-store, Internet edge and data center environments in a PCI DSS compliant manner.

"The complexity of PCI compliance cannot be untangled by a single product or set of products; the requirements call for a holistic strategy that spans people, process, and technology," said Jim Melvin, vice president of Marketing and Security Solutions at RSA. "Smart retailers, who take advantage of PCI DSS as an opportunity to establish a foundation of broad data security best practices, will be better prepared to not only achieve and maintain PCI DSS compliance, but to ready their organizations for new data security and compliance requirements that may emerge in the future."

Delivering one of the industry's most comprehensive PCI DSS solutions

"The strategic alliance between RSA and Cisco centers on the development of technology to bring data protection into the network to help customers simplify the protection of sensitive information," said Melvin. "Today with our combined expertise, we are able to offer retailers one of the industry's most comprehensive sets of audited technologies and services designed to protect credit card data whether it resides in-store, at the Internet Edge or at the data center."

The RSA technology solutions included in the Validated Network Designs include:

RSA Professional Services and Technology Solutions offer strategic, consultative approach to broader compliance

In order to secure card holder data, as in accordance with the PCI DSS, companies must monitor where the data is stored throughout their enterprise. RSA Professional Services helps enable customers to understand where cardholder data exists across the organization so that it can be secured and managed throughout its lifecycle. To achieve this, RSA Professional Services uses a range of application, network and data discovery, and classification technologies to analyze the location and transaction flow of cardholder data, making securing the data easier.

After discovering cardholder data, retailers must understand any existing PCI compliance gaps in order to identify remediation needs. Through a PCI Readiness Assessment service, RSA Professional Services helps retailers understand their current PCI posture and develop a prioritized remediation roadmap prior to undergoing a formal PCI audit.

In addition to these consulting services, RSA PCI Solutions - including RSA® Data Loss Prevention Suite, RSA® Database Security Manager, RSA® Digital Certificate Solutions, EMC Smarts®, EMC Voyence® and EMC Physical Security Solutions - help retailers address PCI requirements related to data leakage, database encryption, strong authentication, application discovery, network change management and physical security, respectively.

To see demonstrations of RSA PCI Solutions at the National Retail Federation conference, please visit booth #3154. For more information about RSA PCI Solutions, please visit www.rsa.com/pci.

About RSA

RSA offers industry-leading solutions in identity assurance and access control, encryption and key management, compliance and security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated. For more information, please visit www.RSA.com and www.EMC.com.