|
|
|
NTOSDP: NT OBJECTives Product and Training Suite for Mastercard SDP
In an effort to protect its cardholders from identity theft, MasterCard has created a very well thought out list of security requirements for its merchants. These are outlined in its Site Data Protection Program (SDP). NTO has created a packaged solution, NTOSDP to allow clients to efficiently and cost effectively achieve compliance with the application security portion of SDP using a single vendor.
| See how NTO can help you comply with the Security Audit Procedures |
 |
|
SDP
SDP requirements can be broken down into 5 groupings:
- Application Security (sections 4, 6, 11)
- Network Security (sections 1, 2, 4, 6, 10, 11)
- Security/Data Storage Business Processes, Access Controls (sections 3, 7, 8 and 12)
- Anti-virus (section 5)
- Physical Security (section 9)
NTOSDP
Resolving the application security portion of SDP will require organizations to develop and document a comprehensive approach to application security. This presents a significant challenge due to the lack of internal resources knowledgeable enough to achieve success. In response to this, NTO has created a Product, Training and Professional Services Suite to provide merchants with an integrated and comprehensive solution to address this portion of SDP. Included are the following:
- NTOSpider - NTOSpider is the most automated and accurate application vulnerability scanner on the market for ensuring compliance with CISP application auditing requirements.
- Training - NTO's industry-leading seminars are taught by published authors and leading researchers. They train auditors to find application security vulnerabilities and teach programmers the secure coding techniques they need to ensure that their applications comply with CISP.
- NTO Professional Services - NTO's experienced team of consultants creates application development processes to ensure that best practices are employed in application development. NTO also creates security policies that enable compliance with the policies section of CISP.
|
|
Turnkey Solution
For those organizations who want to deal with a single point of contact to ensure CISP compliance, NTO has alliances with vendors and security consultants in network and physical security and can present a turnkey solution.
|
|